CVE-2019-13207: Buffer Overflow

Published Jul 3, 2019

Updated

nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dnameconcatenate() function in dname.c.

Affected Software

1 affected component

nlnetlabs Name Server Daemon=4.2.0

Event History

Jul 3, 2019

CVE Published

via MITRE·07:49 PM

Data Sourced

via MITRE·07:49 PM

Description

Frequently Asked Questions

What is CVE-2019-13207?

CVE-2019-13207 is a vulnerability found in NLnet Labs NSD 4.2.0 where nsd-checkzone has a stack-based buffer overflow in the dname_concatenate() function in dname.c.

What is the severity of CVE-2019-13207?

CVE-2019-13207 has a critical severity with a CVSS score of 9.8.

How does CVE-2019-13207 affect NLnet Labs NSD 4.2.0?

CVE-2019-13207 affects NLnet Labs NSD 4.2.0 by exploiting a stack-based buffer overflow in the dname_concatenate() function in dname.c.

How can I fix CVE-2019-13207?

To fix CVE-2019-13207, it is recommended to apply the necessary patches or updates provided by the vendor NLnet Labs.

Are there any references for CVE-2019-13207?

Yes, you can find references for CVE-2019-13207 at the following links: [Reference 1](https://github.com/NLnetLabs/nsd/issues/20) and [Reference 2](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FDS4H7WVHQGCX3LF72F5K22VJXN7HDBB/)