CVE-2009-2958
NoneCVSS
—
EPSS
10.4%
Published
Sep 2, 2009
CISA due date
—
The record
The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | dnsmasq | 0 | 2.50-1 |
| Debian:12 | dnsmasq | 0 | 2.50-1 |
| Debian:13 | dnsmasq | 0 | 2.50-1 |
| Debian:5.0 | dnsmasq | 0 | 2.45-1+lenny1 |
| Red Hat:enterprise_linux:5::client | dnsmasq | 0 | 0:2.45-1.1.el5_3 |
| Red Hat:enterprise_linux:5::client | dnsmasq-debuginfo | 0 | 0:2.45-1.1.el5_3 |
| Red Hat:enterprise_linux:5::server | dnsmasq | 0 | 0:2.45-1.1.el5_3 |
| Red Hat:enterprise_linux:5::server | dnsmasq-debuginfo | 0 | 0:2.45-1.1.el5_3 |
Related vulnerabilities
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects dnsmasq
- CVE-2017-14491 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a… Also affects dnsmasq
- CVE-2017-14496 Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the… Also affects dnsmasq
- CVE-2017-14492 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a… Also affects dnsmasq
- CVE-2017-14495 Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet… Also affects dnsmasq
- CVE-2017-14494 dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain… Also affects dnsmasq
- CVE-2017-14493 Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a… Also affects dnsmasq
- CVE-2017-13704 In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size… Also affects dnsmasq