Unscored severity · published Oct 23, 2008
CVE-2008-2469
Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT…
–
CVSS
22.2%
EPSS
No
On KEV
Description
Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field.
Exploitation
Is it being used?
Exploit prediction (EPSS)22.2% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libspf2 · Libspf
through 1.2.7; 1.0.2; 1.0.3; 1.0.4; 1.2.1; 1.2.3; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2469
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2469
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?format=multiple&id=242254
secunia.com
http://secunia.com/advisories/32396
secunia.com
http://secunia.com/advisories/32450
Vendor Advisory
http://secunia.com/advisories/32496
secunia.com
http://secunia.com/advisories/32720
security.gentoo.org
http://security.gentoo.org/glsa/glsa-200810-03.xml