NetSight
critical9.8

CVE-2019-13952

The set_ipv6() function in zscan_rfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address …

Impact

The set_ipv6() function in zscan_rfc1035.rl in gdnsd before 2.4.3 and 3.x before 3.2.1 has a stack-based buffer overflow via a long and malformed IPv6 address in zone data.

Affected products

VendorProductAffected versions
GdnsdGdnsd
before 2.4.3
from 3.0.0 before 3.2.1

Weakness classification

References