UBUNTU-CVE-2023-31470
Dashboard / Vulnerabilities / UBUNTU-CVE-2023-31470
Summary:
Details: SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file, via a crafted DNS request.
References: https://ubuntu.com/security/CVE-2023-31470, https://github.com/pymumu/smartdns/commit/56d0332bf91104cfc877635f6c82e9348587df04, https://github.com/pymumu/smartdns/issues/1378, https://www.cve.org/CVERecord?id=CVE-2023-31470
Affected packages
Package
Name: smartdns
Purl: pkg:deb/ubuntu/smartdns@35+dfsg-1?arch=source&distro=jammy
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
33+dfsg-2.1
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
