Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

thekelleys dnsmasq 2.35 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2009-2957
Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq prior to 2.50, when --enable-tftp is used, might allow remote malicious users to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request.
Thekelleys Dnsmasq 2.48Thekelleys Dnsmasq 2.47Thekelleys Dnsmasq 2.35Thekelleys Dnsmasq 2.22Thekelleys Dnsmasq 2.34Thekelleys Dnsmasq 2.33Thekelleys Dnsmasq 2.31Thekelleys Dnsmasq 2.23Thekelleys Dnsmasq 2.21Thekelleys Dnsmasq 2.14Thekelleys Dnsmasq 2.13Thekelleys Dnsmasq 2.5Thekelleys Dnsmasq 2.4Thekelleys Dnsmasq 1.16Thekelleys Dnsmasq 1.15Thekelleys Dnsmasq 1.8Thekelleys Dnsmasq 1.7Thekelleys Dnsmasq 0.992Thekelleys Dnsmasq 0.98Thekelleys DnsmasqThekelleys Dnsmasq 2.44Thekelleys Dnsmasq 2.43
4.3
CVSSv2
CVE-2009-2958
The tftp_request function in tftp.c in dnsmasq prior to 2.50, when --enable-tftp is used, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.
Thekelleys Dnsmasq 2.45Thekelleys Dnsmasq 2.44Thekelleys Dnsmasq 2.40Thekelleys Dnsmasq 2.39Thekelleys Dnsmasq 2.29Thekelleys Dnsmasq 2.28Thekelleys Dnsmasq 2.19Thekelleys Dnsmasq 2.18Thekelleys Dnsmasq 2.43Thekelleys Dnsmasq 2.42Thekelleys Dnsmasq 2.38Thekelleys Dnsmasq 2.37Thekelleys Dnsmasq 2.36Thekelleys Dnsmasq 2.27Thekelleys Dnsmasq 2.26Thekelleys Dnsmasq 2.17Thekelleys Dnsmasq 2.16Thekelleys Dnsmasq 2.9Thekelleys Dnsmasq 2.8Thekelleys Dnsmasq 2.7Thekelleys Dnsmasq 2.0Thekelleys Dnsmasq 1.18
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2021-35000CVE-2024-4439unauthorizedCVE-2024-0042CVE-2024-31848CVE-2023-40694cache poisoningCVE-2024-23707firmware
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook