CVE-2023-50434
April 29, 2024, 10:15 p.m.
Tags
Product(s) Impacted
emdns
- before be565c3
Description
emdns_resolve_raw in emdns.c in emdns through fbd1eef calls strlen with an input that may not be '\0' terminated, leading to a stack-based buffer over-read. This can be triggered by a remote adversary that can send DNS requests to the emdns server. The impact could vary depending on the system libraries, compiler, and processor architecture. Code before be565c3 is unaffected.
Weaknesses
Date
Published: April 29, 2024, 10:15 p.m.
Last Modified: April 29, 2024, 10:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org
References
https://papers.mathyvanhoef.com/
cve@mitre.org