Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 4:29 a.m.•25 views

CVE-2023-50434

emdnsresolveraw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system...

9.8CVSS7.3AI score0.00561EPSS
SaveExploits0
NVD
NVD
•added 2024/04/29 10:15 p.m.•34 views

CVE-2023-50434

emdnsresolveraw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system...

9.8CVSS6.9AI score0.00561EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/29 12:00 a.m.•6 views

CVE-2023-50434: Stack-based Buffer Overflow

emdnsresolveraw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system...

9.8CVSS6.2AI score0.00561EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/29 12:00 a.m.•25 views

CVE-2023-50434

emdnsresolveraw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system...

7.2AI score0.00561EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/29 12:00 a.m.•21 views

emdns 安全漏洞

emdns is a DNS software by the individual developer Michael Santos. A security vulnerability exists in versions prior to emdns be565c3, which stems from emdnsresolveraw in emdns.c calling strlen via fbd1eef, whose input may not terminate with a termination, resulting in an over-read of a...

9.8CVSS6.7AI score0.00561EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/04/29 12:00 a.m.•42 views

CVE-2023-50434

emdnsresolveraw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system...

7.2AI score0.00561EPSS
SaveExploits0References1
Mend
Mend
•added 2024/04/29 12:00 a.m.•4 views

CVE-2023-50434

emdnsresolveraw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system...

9.8CVSS0.00561EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/29 12:00 a.m.•18 views

PT-2024-13939 · Emdns · Emdns

Name of the Vulnerable Software and Affected Versions: emdns versions through fbd1eef Description: The issue arises from the emdns resolve raw function in emdns.c, which calls strlen with an input that may not be 0 terminated, leading to a stack-based buffer over-read. This can be triggered by a...

9.8CVSS7.2AI score0.00561EPSS
SaveExploits0References3
Rows per page
Query Builder