CVE-2008-3910 dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the (1) dns_simple_decode or (2) dns_decode function, which allows remote attackers to....
HighCVSS 10.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the (1) dns_simple_decode or (2) dns_decode function, which allows remote attackers to overwrite a buffer and have unspecified other impact.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hsc dns2tcp | <= 0.4 | No fix listed |
| debian/dns2tcp(Debian:12) | < 0.4.dfsg-2 | 0.4.dfsg-2 |
| debian/dns2tcp(Debian:13) | < 0.4.dfsg-2 | 0.4.dfsg-2 |
| debian/dns2tcp(Debian:14) | < 0.4.dfsg-2 | 0.4.dfsg-2 |
References
- www.hsc.fr
- [oss-security] 20080904 CVE id request: dns2tcp exploit mailing-list
- 31080 vdb-entry
- dns2tcp-dnssimpledecode-dnsdecode-bo(44974) vdb-entry
- Debian Security Tracker CVE-2008-3910 vendor-advisory
- bugs.debian.org issue-tracking