Libtins
Monthly
Out-of-bounds read in libtins through 4.6 can crash applications that parse attacker-supplied DNS SOA records through the library's buffer constructor and may expose limited adjacent heap data. The flaw occurs in DNS::soa_record::init when SOA RDATA lacks a NUL terminator, causing strlen to run past the heap buffer; remote unauthenticated attackers can trigger it only against applications that actually feed untrusted SOA data into this constructor. No public exploit or CISA KEV entry was identified at time of analysis, and the assessed CVSS 3.1 score is 6.3 with high attack complexity due to heap-layout and NUL-byte preconditions.
Heap out-of-bounds read in libtins's DNS name parser through version 4.6 can be triggered by a crafted DNS label that ends exactly at the packet buffer boundary, causing a one-byte read past the buffer when additional, answer, or authority records are parsed. The flaw is network-reachable and unauthenticated per the CVSS vector (PR:N/UI:N), but impact is limited to availability: affected applications may crash, especially on hardened allocators, while non-hardened allocators may only read adjacent memory. No public exploit identified at time of analysis.
Out-of-bounds read in libtins through 4.6 can crash applications that parse attacker-supplied DNS SOA records through the library's buffer constructor and may expose limited adjacent heap data. The flaw occurs in DNS::soa_record::init when SOA RDATA lacks a NUL terminator, causing strlen to run past the heap buffer; remote unauthenticated attackers can trigger it only against applications that actually feed untrusted SOA data into this constructor. No public exploit or CISA KEV entry was identified at time of analysis, and the assessed CVSS 3.1 score is 6.3 with high attack complexity due to heap-layout and NUL-byte preconditions.
Heap out-of-bounds read in libtins's DNS name parser through version 4.6 can be triggered by a crafted DNS label that ends exactly at the packet buffer boundary, causing a one-byte read past the buffer when additional, answer, or authority records are parsed. The flaw is network-reachable and unauthenticated per the CVSS vector (PR:N/UI:N), but impact is limited to availability: affected applications may crash, especially on hardened allocators, while non-hardened allocators may only read adjacent memory. No public exploit identified at time of analysis.