Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q26r-j393-x8vq

Опубликовано: 31 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential information disclosure.

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential information disclosure.

EPSS

Процентиль: 61%
0.01028
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-126

Связанные уязвимости

CVSS3: 5.3
ubuntu
5 месяцев назад

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential information disclosure.

CVSS3: 5.3
nvd
5 месяцев назад

An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential information disclosure.

CVSS3: 5.3
debian
5 месяцев назад

An attacker might be able to trigger an out-of-bounds read by sending ...

CVSS3: 8.2
redos
8 дней назад

Уязвимость dnsdist

CVSS3: 8.2
redos
8 дней назад

Уязвимость dnsdist

EPSS

Процентиль: 61%
0.01028
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-126