Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Remote Memory Exposure
Vulnerability Description
This affects the package dns-packet before 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over unencrypted network when querying crafted invalid domain names.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Vulnerability Type
N/A
Vulnerability Title
dns-packet 信息泄露漏洞
Vulnerability Description
dns-packet是一个应用软件。一个抽象的编码为编码/解码DNS数据包的依从模型。 dns-packet 5.2.2之前版本存在安全漏洞，该漏洞源于使用allocUnsafe创建缓冲区，并且在形成网络数据包之前并不总是填充它们。
CVSS Information
N/A
Vulnerability Type
N/A