Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2009-2958
HistorySep 02, 2009 - 3:30 p.m.

CVE-2009-2958

2009-09-0215:30:00
CWE-399
[email protected]
web.nvd.nist.gov
115
security
denial of service
cve-2009-2958
dnsmasq
tftp
nvd

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.036 Low

EPSS

Percentile

91.5%

JSON

The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.

Related

checkpoint_advisories 1
veracode 1
prion 1
ubuntucve 1
seebug 3
debiancve 1
securityvulns 4
nessus 13
openvas 23
exploitpack 1
oraclelinux 1
gentoo 1
redhat 2
fedora 2
centos 1
coresecurity 1
freebsd 1
debian 1
altlinux 1
osv 1
packetstorm 1
ubuntu 1
exploitdb 1
checkpoint_advisories
checkpoint_advisories
Dnsmasq Malicious BLKSIZE Option NULL Dereference Denial of Service (CVE-2009-2958)
2015-03-26 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:37:16
prion
prion
Null pointer dereference
2009-09-02 15:30:00
ubuntucve
ubuntucve
CVE-2009-2958
2009-09-02 00:00:00
seebug
seebug
Dnsmasq TFTPζœεŠ‘θΏœη¨‹η©ΊζŒ‡ι’ˆεΌ•η”¨ζΌζ΄ž
2009-09-02 00:00:00
Dnsmasq < 2.50 Heap Overflow & Null pointer Dereference Vulns
2009-09-09 00:00:00
Dnsmasq < 2.50 - Heap Overflow & Null pointer Dereference Vulns
2014-07-01 00:00:00
debiancve
debiancve
CVE-2009-2958
2009-09-02 15:30:00
securityvulns
securityvulns
dnsmasq TFTP server multiple security vulnerabilities
2009-09-10 00:00:00
[SECURITY] [DSA 1876-1] New dnsmasq packages fix remote code execution
2009-09-02 00:00:00
CORE-2009-0820 - Dnsmasq Heap Overflow and Null-pointer Dereference on TFTP Server
2009-09-10 00:00:00
nessus
nessus
FreeBSD : dnsmasq -- TFTP server remote code injection vulnerability (80aa98e0-97b4-11de-b946-0030843d3802)
2009-09-03 00:00:00
Oracle Linux 5 : dnsmasq (ELSA-2009-1238)
2013-07-12 00:00:00
GLSA-200909-19 : Dnsmasq: Multiple vulnerabilities
2009-09-21 00:00:00
openvas
openvas
CentOS Security Advisory CESA-2009:1238 (dnsmasq)
2009-09-09 00:00:00
Fedora Core 11 FEDORA-2009-10285 (dnsmasq)
2009-10-19 00:00:00
Debian: Security Advisory (DSA-1876-1)
2009-09-09 00:00:00
exploitpack
exploitpack
Dnsmasq 2.50 - Heap Overflow Null Pointer Dereference
2009-09-09 00:00:00
oraclelinux
oraclelinux
dnsmasq security update
2009-08-31 00:00:00
gentoo
gentoo
Dnsmasq: Multiple vulnerabilities
2009-09-20 00:00:00
redhat
redhat
(RHSA-2009:1238) Important: dnsmasq security update
2009-08-31 00:00:00
(RHSA-2010:0095) Important: rhev-hypervisor security and bug fix update
2010-02-09 00:00:00
fedora
fedora
[SECURITY] Fedora 11 Update: dnsmasq-2.46-3.fc11
2009-10-14 01:33:55
[SECURITY] Fedora 10 Update: dnsmasq-2.46-2.fc10
2009-10-14 01:59:02
centos
centos
dnsmasq security update
2009-09-01 15:10:22
coresecurity
coresecurity
Dnsmasq Heap Overflow and NULL-pointer derreference on TFTP Server
2009-08-31 00:00:00
freebsd
freebsd
dnsmasq -- TFTP server remote code injection vulnerability
2009-08-31 00:00:00
debian
debian
[SECURITY] [DSA 1876-1] New dnsmasq packages fix remote code execution
2009-09-01 19:41:26
altlinux
altlinux
Security fix for the ALT Linux 5 package dnsmasq version 2.46-alt1.1.M51.2
2010-03-01 00:00:00
osv
osv
dnsmasq - remote code execution
2009-09-01 00:00:00
packetstorm
packetstorm
Core Security Technologies Advisory 2009.0820
2009-09-02 00:00:00
ubuntu
ubuntu
Dnsmasq vulnerabilities
2009-09-01 00:00:00
exploitdb
exploitdb
Dnsmasq &lt; 2.50 - Heap Overflow / Null Pointer Dereference
2009-09-09 00:00:00

6.2 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.036 Low

EPSS

Percentile

91.5%

JSON
Related for CVE-2009-2958
checkpoint_advisories1veracode1prion1ubuntucve1seebug3debiancve1securityvulns4nessus13openvas23exploitpack1oraclelinux1gentoo1redhat2fedora2centos1coresecurity1freebsd1debian1altlinux1osv1packetstorm1ubuntu1exploitdb1