CVE-2017-9430 in dnstracerinfo

Summary

Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a command line with a long name argument that is mishandled in a strcpy call for argv[0]. An example threat model is a web application that launches dnstracer with an untrusted name string.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

06/04/2017

Disclosure

06/05/2017

CPE

ready

Exploit

Download

CVSS

8.5

EPSS

0.14685

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!