Skip to main content

Pymumu

3 CVEs vendor

Monthly

CVE-2024-24199 Jun 06, 22:15 HIGH This Week

smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/dns.c. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Smartdns Pymumu
NVD GitHub
CVSS 3.1
7.5
EPSS
0.5%
CVE-2024-24198 Jun 06, 22:15 HIGH This Week

smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Smartdns Pymumu
NVD GitHub
CVSS 3.1
7.5
EPSS
0.5%
CVE-2023-31470 Apr 28, 21:15 CRITICAL POC PATCH Act Now

SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file, via a crafted DNS request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Memory Corruption Smartdns Pymumu
NVD GitHub
CVSS 3.1
9.8
EPSS
1.1%
EPSS 0% CVSS 7.5
HIGH This Week

smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/dns.c. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Smartdns Pymumu
NVD GitHub
EPSS 0% CVSS 7.5
HIGH This Week

smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Smartdns Pymumu
NVD GitHub
EPSS 1% CVSS 9.8
CRITICAL POC PATCH Act Now

SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file, via a crafted DNS request. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Memory Corruption Smartdns +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy