Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a buffer overflow.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
nlnetlabs nsd 2.0.1 |
||
nlnetlabs nsd 2.1.0 |
||
nlnetlabs nsd 2.1.2 |
||
nlnetlabs nsd 3.2.1 |
||
nlnetlabs nsd 2.3.7 |
||
nlnetlabs nsd 2.0.0 |
||
nlnetlabs nsd 2.1.3 |
||
nlnetlabs nsd 2.1.4 |
||
nlnetlabs nsd 2.1.5 |
||
nlnetlabs nsd 2.0.2 |
||
nlnetlabs nsd 2.1.1 |
Vulmon