Vulnerabilities > CVE-2019-13951 - Out-of-bounds Write vulnerability in Gdnsd 3.2.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
gdnsd
CWE-787

Summary

The set_ipv4() function in zscan_rfc1035.rl in gdnsd 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv4 address in zone data.

Vulnerable Configurations

Part Description Count
Application
Gdnsd
1

Common Weakness Enumeration (CWE)