critical9.8Public exploit code
CVE-2017-9430
Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impac…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DNSTracer 1.8.1 - Buffer Overflow (PoC)2017-06-05 · dos · linux · Verified
- DNSTracer 1.9 - Local Buffer Overflow2017-08-03 · local · linux
Impact
Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a command line with a long name argument that is mishandled in a strcpy call for argv[0]. An example threat model is a web application that launches dnstracer with an untrusted name string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dnstracer Project | Dnstracer | through 1.9 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cxsecurity.com/issue/WLB-2017060030
- https://packetstormsecurity.com/files/142799/DNSTracer-1.8.1-Buffer-Overflow.html
- https://www.exploit-db.com/exploits/42115/
- https://www.exploit-db.com/exploits/42424/
- https://cxsecurity.com/issue/WLB-2017060030
- https://packetstormsecurity.com/files/142799/DNSTracer-1.8.1-Buffer-Overflow.html
- https://www.exploit-db.com/exploits/42115/
- https://www.exploit-db.com/exploits/42424/