Published: 02/09/2009 Updated: 19/09/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The tftp_request function in tftp.c in dnsmasq prior to 2.50, when --enable-tftp is used, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.

Vulnerable Product	Search on Vulmon	Subscribe to Product
thekelleys dnsmasq 2.45
thekelleys dnsmasq 2.44
thekelleys dnsmasq 2.40
thekelleys dnsmasq 2.39
thekelleys dnsmasq 2.29
thekelleys dnsmasq 2.28
thekelleys dnsmasq 2.19
thekelleys dnsmasq 2.18
thekelleys dnsmasq 2.43
thekelleys dnsmasq 2.42
thekelleys dnsmasq 2.38
thekelleys dnsmasq 2.37
thekelleys dnsmasq 2.36
thekelleys dnsmasq 2.27
thekelleys dnsmasq 2.26
thekelleys dnsmasq 2.17
thekelleys dnsmasq 2.16
thekelleys dnsmasq 2.9
thekelleys dnsmasq 2.8
thekelleys dnsmasq 2.7
thekelleys dnsmasq 2.0
thekelleys dnsmasq 1.18
thekelleys dnsmasq 1.11
thekelleys dnsmasq 1.10
thekelleys dnsmasq 1.2
thekelleys dnsmasq 1.0
thekelleys dnsmasq 0.6
thekelleys dnsmasq 0.5
thekelleys dnsmasq 2.11
thekelleys dnsmasq 2.10
thekelleys dnsmasq 2.2
thekelleys dnsmasq 2.1
thekelleys dnsmasq 1.13
thekelleys dnsmasq 1.12
thekelleys dnsmasq 1.5
thekelleys dnsmasq 1.4
thekelleys dnsmasq 1.3
thekelleys dnsmasq 0.95
thekelleys dnsmasq 0.7
thekelleys dnsmasq 2.47
thekelleys dnsmasq 2.46
thekelleys dnsmasq 2.22
thekelleys dnsmasq 2.25
thekelleys dnsmasq 2.31
thekelleys dnsmasq 2.30
thekelleys dnsmasq 2.21
thekelleys dnsmasq 2.20
thekelleys dnsmasq 2.13
thekelleys dnsmasq 2.12
thekelleys dnsmasq 2.4
thekelleys dnsmasq 2.3
thekelleys dnsmasq 1.15
thekelleys dnsmasq 1.14
thekelleys dnsmasq 1.7
thekelleys dnsmasq 1.6
thekelleys dnsmasq 0.98
thekelleys dnsmasq 0.96
thekelleys dnsmasq 2.48
thekelleys dnsmasq 2.41
thekelleys dnsmasq 2.35
thekelleys dnsmasq 2.34
thekelleys dnsmasq 2.33
thekelleys dnsmasq 2.24
thekelleys dnsmasq 2.23
thekelleys dnsmasq 2.15
thekelleys dnsmasq 2.14
thekelleys dnsmasq 2.6
thekelleys dnsmasq 2.5
thekelleys dnsmasq 1.17
thekelleys dnsmasq 1.16
thekelleys dnsmasq 1.9
thekelleys dnsmasq 1.8
thekelleys dnsmasq 0.996
thekelleys dnsmasq 0.992
thekelleys dnsmasq 0.4
thekelleys dnsmasq

IvAin Arce, Pablo HernAin Jorge, Alejandro Pablo Rodriguez, MartAn Coco, Alberto SoliAto Testa and Pablo Annetta discovered that Dnsmasq did not properly validate its input when processing TFTP requests for files with long names A remote attacker could cause a denial of service or execute arbitrary code with user privileges Dnsmasq runs as the ...

Several remote vulnerabilities have been discovered in the TFTP component of dnsmasq The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-2957 A buffer overflow in TFTP processing may enable arbitrary code execution to attackers which are permitted to use the TFTP service CVE-2009-2958 Malicious TFTP ...

Core Security Technologies Advisory - A vulnerability has been found in Dnsmasq that may allow an attacker to execute arbitrary code on servers or home routers running dnsmasq with the TFTP service enabled ...

CWE-399 https://bugzilla.redhat.com/show_bug.cgi?id=519020 http://www.thekelleys.org.uk/dnsmasq/CHANGELOG http://www.coresecurity.com/content/dnsmasq-vulnerabilities http://www.securityfocus.com/bid/36120 https://rhn.redhat.com/errata/RHSA-2010-0095.html http://secunia.com/advisories/36563 http://www.redhat.com/support/errata/RHSA-2009-1238.html http://www.ubuntu.com/usn/USN-827-1 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9816 https://usn.ubuntu.com/827-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/9617/

CVE-2009-2958

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect