Vulnerabilities > CVE-2019-13951 - Out-of-bounds Write vulnerability in Gdnsd 3.2.0

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
gdnsd
CWE-787
critical

Summary

The set_ipv4() function in zscan_rfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data.

Vulnerable Configurations

Part Description Count
Application
Gdnsd
1

Common Weakness Enumeration (CWE)