p PatchFirst

CVE-2009-1755

CVE-2009-1755

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a buffer overflow.

EPSS 3.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • nsd Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.3.7-3

    Update to 2.3.7-3

  • nsd Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.3.7-3

    Update to 2.3.7-3

  • nsd Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.3.7-3

    Update to 2.3.7-3

Original sources

Check your server →