Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the (1) dns_simple_decode or (2) dns_decode function, which allows remote attackers to overwrite a buffer and have unspecified other impact.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Dns2tcp 'dns_decode'函数负值处理缓冲区溢出漏洞
Vulnerability Description
Dns2tcp是一种通过DNS通信转发TCP流量的网络工具。 Dns2tcp的实现上存在缓冲溢出漏洞,远程攻击攻击者可能利用此漏洞在服务器上执行任意指令。漏洞存在于server/dns_decode.c文件的dns_decode()函数中,攻击者可以利用此漏洞通过构造恶意输入导致缓冲区溢出。
CVSS Information
N/A
Vulnerability Type
N/A