thekelleys dnsmasq 2.39
Approved changes feed: RSS · Atom
cpe:2.3:a:thekelleys:dnsmasq:2.39:*:*:*:*:*:*:*part: a version: 2.39 update: *
| Vendor | Thekelleys (2b401865-b44d-5460-8982-05bf0b551d92) |
|---|---|
| Product | Dnsmasq (dd61cf97-cadb-5769-bf49-db575863c2d6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/dnsmasq |
purl2cpe | 2026-06-01 10:11:34.524250 |
pkg:deb/ubuntu/dnsmasq |
purl2cpe | 2026-06-01 10:11:34.524252 |
pkg:github/dnsfilter/dnsmasq |
purl2cpe | 2026-06-01 10:11:34.524254 |
pkg:github/guns/dnsmasq |
purl2cpe | 2026-06-01 10:11:34.524255 |
pkg:github/powerdns/dnsmasq |
purl2cpe | 2026-06-01 10:11:34.524257 |
pkg:gitlab/redhat/dnsmasq |
purl2cpe | 2026-06-01 10:11:34.524258 |
pkg:rpm/fedora/dnsmasq |
purl2cpe | 2026-06-01 10:11:34.524260 |
pkg:rpm/opensuse/dnsmasq |
purl2cpe | 2026-06-01 10:11:34.524261 |
pkg:thekelleys/dnsmasq |
purl2cpe | 2026-06-01 10:11:34.524263 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-2958 |
vulnerable | 2026-06-08 04:51:31.569593 |
Details available
The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.
Published: 2009-09-02T15:00:00.000Z
Updated: 2024-08-07T06:07:37.397Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-2957 |
vulnerable | 2026-06-08 04:51:31.563240 |
Details available
Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request.
Published: 2009-09-02T15:00:00.000Z
Updated: 2024-08-07T06:07:37.403Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.