Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

J0Lama

#25810de 53,632
9.8CVSS total
Vulnerabilidades · 1
PT-2017-18915
9.8
2017-06-05
Dnstracer · Dnstracer · CVE-2017-9430
**Name of the Vulnerable Software and Affected Versions** dnstracer versions prior to 1.9 **Description** The issue is a stack-based buffer overflow that can cause a denial of service, resulting in an application crash, or possibly have other unspecified impacts. This occurs when a command line with a long name argument is mishandled in a strcpy call for `argv[0]`. A potential threat model involves a web application that launches dnstracer with an untrusted name string. **Recommendations** For versions prior to 1.9, consider restricting the use of dnstracer with untrusted input to minimize the risk of exploitation. As a temporary workaround, limit the length of command line arguments passed to dnstracer until a fix is available.