Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w68q-j3pw-29rg

Опубликовано: 31 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. In some cases the rewritten packet might become larger than the initial response and even exceed 65535 bytes, potentially leading to a crash resulting in denial of service.

An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. In some cases the rewritten packet might become larger than the initial response and even exceed 65535 bytes, potentially leading to a crash resulting in denial of service.

EPSS

Процентиль: 40%
0.00489
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 5.9
ubuntu
5 месяцев назад

An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. In some cases the rewritten packet might become larger than the initial response and even exceed 65535 bytes, potentially leading to a crash resulting in denial of service.

CVSS3: 5.9
nvd
5 месяцев назад

An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. In some cases the rewritten packet might become larger than the initial response and even exceed 65535 bytes, potentially leading to a crash resulting in denial of service.

CVSS3: 5.9
debian
5 месяцев назад

An attacker might be able to trigger an out-of-bounds write by sending ...

CVSS3: 7.5
redos
8 дней назад

Уязвимость dnsdist

CVSS3: 7.5
redos
8 дней назад

Уязвимость dnsdist

EPSS

Процентиль: 40%
0.00489
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-787