SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file, via a crafted DNS request.
Loading...
Loading...
Score 9.8 from GitHub Security Advisory (severity: CRITICAL) published 2023-04-28. NVD baseline CVSS 9.8; sources differ by 0.0.
SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file, via a crafted DNS request.
April 28, 2023
January 31, 2025
Fix landed in pymumu/smartdns commit 56d0332bf911 — awaiting tagged release
https://github.com/pymumu/smartdns/commit/56d0332bf91104cfc877635f6c82e9348587df04MITRE Common Weakness Enumeration — the root-cause categories this CVE belongs to.
Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.
Explore the affected products and dependency analysis for CVE-2023-31470
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.
CWE-787