4.3

CVE-2009-2958: thekelleys dnsmasq Resource Management Errors

CVSS: 4.3v2.0MediumModified
AliasesDEBIAN-CVE-2009-2958
Published 02-09-2009Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2009-2958 is a medium (CVSS 4.3) Resource Management Errors vulnerability in thekelleys dnsmasq. EPSS estimates a 10.38% chance of exploitation in the next 30 days, higher than 95.6% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
29/100
0100
Medium · default modelHow is this calculated?
CVSS score
4.3/10
010
Medium · v2.0 (NVD)
EPSS score
10.38%
0%100%
Medium · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 2
DSA-1876-1RHSA-2009:1238

Timeline

  1. 02-09-2009
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

10.38%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.38% on 19-09-2026

19-09-202619-10-2026
EPSS score
10.38%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • exploit-databasedoswindowsVerified

    Dnsmasq < 2.50 - Heap Overflow / Null Pointer Dereference

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Debian1 product
  • dnsmasq< 2.50-1
Thekelleys1 product
  • dnsmasq≤ 2.49 | 0.4 | 0.5 | 0.6 | 0.7 | 0.95 | 0.96 | 0.98 | 0.992 | 0.996 | 1.0 | 1.2 | 1.3 | 1.4 | 1.5 | 1.6 | 1.7 | 1.8 | 1.9 | 1.10 | 1.11 | 1.12 | 1.13 | 1.14 | 1.15 | 1.16 | 1.17 | 1.18 | 2.0 | 2.1 | 2.2 | 2.3 | 2.4 | 2.5 | 2.6 | 2.7 | 2.8 | 2.9 | 2.10 | 2.11 | 2.12 | 2.13 | 2.14 | 2.15 | 2.16 | 2.17 | 2.18 | 2.19 | 2.20 | 2.21 | 2.22 | 2.23 | 2.24 | 2.25 | 2.26 | 2.27 | 2.28 | 2.29 | 2.30 | 2.31 | 2.33 | 2.34 | 2.35 | 2.36 | 2.37 | 2.38 | 2.39 | 2.40 | 2.41 | 2.42 | 2.43 | 2.44 | 2.45 | 2.46 | 2.47 | 2.48

2 vendors · 2 products

References

10 links