CVE-2009-2957

medium · 6.8

Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request.

6.8

CVSS

12.7%

EPSS (exploit prob.)

96th

EPSS percentile

2009-09-02

Published

AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
thekelleys	dnsmasq	<= 2.49
thekelleys	dnsmasq	0.4
thekelleys	dnsmasq	0.5
thekelleys	dnsmasq	0.6
thekelleys	dnsmasq	0.7
thekelleys	dnsmasq	0.95
thekelleys	dnsmasq	0.96
thekelleys	dnsmasq	0.98
thekelleys	dnsmasq	0.992
thekelleys	dnsmasq	0.996
thekelleys	dnsmasq	1.0
thekelleys	dnsmasq	1.2
thekelleys	dnsmasq	1.3
thekelleys	dnsmasq	1.4
thekelleys	dnsmasq	1.5
thekelleys	dnsmasq	1.6
thekelleys	dnsmasq	1.7
thekelleys	dnsmasq	1.8
thekelleys	dnsmasq	1.9
thekelleys	dnsmasq	1.10
thekelleys	dnsmasq	1.11
thekelleys	dnsmasq	1.12
thekelleys	dnsmasq	1.13
thekelleys	dnsmasq	1.14
thekelleys	dnsmasq	1.15
thekelleys	dnsmasq	1.16
thekelleys	dnsmasq	1.17
thekelleys	dnsmasq	1.18
thekelleys	dnsmasq	2.0
thekelleys	dnsmasq	2.1
thekelleys	dnsmasq	2.2
thekelleys	dnsmasq	2.3
thekelleys	dnsmasq	2.4
thekelleys	dnsmasq	2.5
thekelleys	dnsmasq	2.6
thekelleys	dnsmasq	2.7
thekelleys	dnsmasq	2.8
thekelleys	dnsmasq	2.9
thekelleys	dnsmasq	2.10
thekelleys	dnsmasq	2.11

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-2957