CVE-2023-31470

CRITICAL

SmartDNS < 41 - Out-of-bounds Write via Crafted DNS Request

Title source: llm

Description

SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file, via a crafted DNS request.

References (2)

Core 2

Core References

Patch

https://github.com/pymumu/smartdns/commit/56d0332bf91104cfc877635f6c82e9348587df04

View Patch ZIP pw:eip

Exploit

https://github.com/pymumu/smartdns/issues/1378

Scores

CVSS v3 9.8

EPSS 0.0112

EPSS Percentile 62.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

Details

CWE

CWE-787

Status published

Products (1)

pymumu/smartdns < 41

Published Apr 28, 2023

Tracked Since Feb 18, 2026