Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xgm5-85mh-3559

Опубликовано: 25 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.2
CVSS3: 8.1

Описание

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.

EPSS

Процентиль: 22%
0.003
Низкий

7.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 2 месяцев назад

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.

CVSS3: 8
redhat
около 2 месяцев назад

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.

CVSS3: 8.1
nvd
около 2 месяцев назад

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes.

CVSS3: 8.1
debian
около 2 месяцев назад

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, ...

suse-cvrf
21 день назад

Security update for nsd

EPSS

Процентиль: 22%
0.003
Низкий

7.2 High

CVSS4

8.1 High

CVSS3

Дефекты

CWE-20