Dns Packet
Approved changes feed: RSS · Atom
cpe:2.3:a:dns-packet_project:dns-packet:*:*:*:*:*:node.js:*:*part: a version: * update: *
| Vendor | Dns Packet Project (17287833-cb36-5e4b-a571-dab31175b5fe) |
|---|---|
| Product | Dns Packet (0a4eb781-c29f-559f-bb07-259d8073fd51) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | node.js |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-23386 |
vulnerable | 2026-06-08 05:30:02.836646 |
Remote Memory Exposure
HIGH (7.7)
This affects the package dns-packet before 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over unencrypted network when querying crafted invalid domain names.
Published: 2021-05-20T16:15:18.500Z
Updated: 2024-09-16T20:52:54.669Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.