CVE-2008-2469
- State
- Published
- Severity
- Not scored
- Published
- Oct 23, 2008
- Updated
- Aug 7, 2024
- Reserved
- May 28, 2008
Description
Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 32720third-party-advisory
- 6805exploit
- 32396third-party-advisory
- 31881vdb-entry
- 4487third-party-advisory
- libspf2-dnstxtrecord-bo(46055)vdb-entry
- https://answers.launchpad.net/ubuntu/gutsy/+source/libspf2/1.2.5.dfsg-4ubuntu0.7.10.1
- http://up2date.astaro.com/2008/11/up2date_7305_released.html
- http://bugs.gentoo.org/show_bug.cgi?format=multiple&id=242254
- DSA-1659vendor-advisory
- ADV-2008-2896vdb-entry
- https://bugs.launchpad.net/ubuntu/feisty/+source/libspf2/+bug/271025
- http://www.doxpara.com/?page_id=1256
- http://www.doxpara.com/?p=1263
- GLSA-200810-03vendor-advisory
- VU#183657third-party-advisory
- 32496third-party-advisory
- 32450third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.