PT-2026-6564 · Nsasoft · Nsauditor

Cervoise · Published 2026-02-05 · Updated 2026-02-05 · CVE-2020-37119

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nsauditor version 3.0.28 Nsauditor version 3.2.1.0

Description A buffer overflow in the DNS Lookup tool allows attackers to execute arbitrary code by overwriting memory. By crafting a malicious DNS query payload, an attacker can trigger a three-byte overwrite to bypass ASLR (Address Space Layout Randomization, a security technique that randomly arranges the address space positions of key data areas of a process) and execute shellcode.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2020-37119

Affected Products

Nsauditor

References · 5

• 🔥 https://exploit-db.com/exploits/48350 · Exploit
• https://osv.dev/vulnerability/CVE-2020-37119 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-37119 · Security Note
• https://vulncheck.com/advisories/nsauditor-buffer-overflow-sehaslr-bypass-bytes-overwrite · Note
• https://nsauditor.com · Note