CVE-2019-13951

Опубликовано: 18 июл. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The set_ipv4() function in zscan_rfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data.

Ссылки

https://github.com/gdnsd/gdnsd/issues/185
Exploit
Third Party Advisory
https://github.com/gdnsd/gdnsd/issues/185
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gdnsd:gdnsd:3.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00459

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2019-13951

CVSS3: 9.8

ubuntu

больше 6 лет назад

The set_ipv4() function in zscan_rfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data.

CVE-2019-13951

CVSS3: 9.8

debian

больше 6 лет назад

The set_ipv4() function in zscan_rfc1035.rl in gdnsd 3.x before 3.2.1 ...

GHSA-r4ww-6726-pj2x

CVSS3: 9.8

github

больше 3 лет назад

The set_ipv4() function in zscan_rfc1035.rl in gdnsd 3.2.0 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data.

EPSS

Процентиль: 64%

0.00459

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787