CVE-2009-1755

Published: May 22, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a buffer overflow.

Affected (11)

Products: Nlnetlabs: Nsd

Nlnetlabs

1 product

Nsd

Configuration A

11 vulnerable · 20 platform

Vulnerable Software	Affected Versions
Nlnetlabs Nsd	Version 2.0.0
Nlnetlabs Nsd	Version 2.0.1
Nlnetlabs Nsd	Version 2.0.2
Nlnetlabs Nsd	Version 2.1.0
Nlnetlabs Nsd	Version 2.1.1
Nlnetlabs Nsd	Version 2.1.2
Nlnetlabs Nsd	Version 2.1.3
Nlnetlabs Nsd	Version 2.1.4
Nlnetlabs Nsd	Version 2.1.5
Nlnetlabs Nsd	Version 2.3.7
Nlnetlabs Nsd	Version 3.2.1

Running on/with	Platform Versions
Nlnetlabs Nsd	Version 2.2.0
Nlnetlabs Nsd	Version 2.2.1
Nlnetlabs Nsd	Version 2.3.0
Nlnetlabs Nsd	Version 2.3.2
Nlnetlabs Nsd	Version 2.3.3
Nlnetlabs Nsd	Version 2.3.4
Nlnetlabs Nsd	Version 2.3.5
Nlnetlabs Nsd	Version 2.3.6
Nlnetlabs Nsd	Version 3.0.0
Nlnetlabs Nsd	Version 3.0.1
Nlnetlabs Nsd	Version 3.0.2
Nlnetlabs Nsd	Version 3.0.3
Nlnetlabs Nsd	Version 3.0.4
Nlnetlabs Nsd	Version 3.0.5
Nlnetlabs Nsd	Version 3.0.6
Nlnetlabs Nsd	Version 3.0.7
Nlnetlabs Nsd	Version 3.0.8
Nlnetlabs Nsd	Version 3.1.0
Nlnetlabs Nsd	Version 3.1.1
Nlnetlabs Nsd	Version 3.2.0