{"api_version":"1","generated_at":"2026-07-23T11:14:32+00:00","cve":"CVE-2009-2958","urls":{"html":"https://cve.report/CVE-2009-2958","api":"https://cve.report/api/cve/CVE-2009-2958.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-2958","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-2958"},"summary":{"title":"CVE-2009-2958","description":"The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-09-02 15:30:01","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-399","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.coresecurity.com/content/dnsmasq-vulnerabilities","name":"http://www.coresecurity.com/content/dnsmasq-vulnerabilities","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Core Security Technologies","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ubuntu.com/usn/USN-827-1","name":"http://www.ubuntu.com/usn/USN-827-1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"USN-827-1: Dnsmasq vulnerabilities | Ubuntu","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG","name":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9816","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9816","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/36563","name":"http://secunia.com/advisories/36563","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Ubuntu update for dnsmasq  - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519020","name":"https://bugzilla.redhat.com/show_bug.cgi?id=519020","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"519020 – (CVE-2009-2957, CVE-2009-2958) CVE-2009-2957, CVE-2009-2958 dnsmasq: multiple vulnerabilities in TFTP server","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","name":"https://rhn.redhat.com/errata/RHSA-2010-0095.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Red Hat Customer Portal","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1238.html","name":"http://www.redhat.com/support/errata/RHSA-2009-1238.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Support","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/36120","name":"http://www.securityfocus.com/bid/36120","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Dnsmasq TFTP Service Remote NULL-Pointer Dereference Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-2958","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2958","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"0.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"0.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"0.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"0.95","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"0.96","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"0.98","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"0.992","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"0.996","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.10","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.12","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.15","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.16","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.18","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.19","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.22","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.23","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.24","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.25","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.26","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.27","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.28","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.29","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.30","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.31","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.33","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.34","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.35","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.36","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.37","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.38","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.39","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.40","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.41","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.42","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.43","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.44","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.45","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.46","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.47","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.48","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.7","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"2.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"2958","vulnerable":"1","versionEndIncluding":"2.49","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"thekelleys","cpe5":"dnsmasq","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T06:07:37.397Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"36563","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/36563"},{"name":"USN-827-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"],"url":"http://www.ubuntu.com/usn/USN-827-1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519020"},{"name":"36120","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/36120"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG"},{"name":"oval:org.mitre.oval:def:9816","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9816"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.coresecurity.com/content/dnsmasq-vulnerabilities"},{"name":"RHSA-2010:0095","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html"},{"name":"RHSA-2009:1238","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"],"url":"http://www.redhat.com/support/errata/RHSA-2009-1238.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-08-31T00:00:00.000Z","descriptions":[{"lang":"en","value":"The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-09-18T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"36563","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/36563"},{"name":"USN-827-1","tags":["vendor-advisory","x_refsource_UBUNTU"],"url":"http://www.ubuntu.com/usn/USN-827-1"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=519020"},{"name":"36120","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/36120"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG"},{"name":"oval:org.mitre.oval:def:9816","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9816"},{"tags":["x_refsource_MISC"],"url":"http://www.coresecurity.com/content/dnsmasq-vulnerabilities"},{"name":"RHSA-2010:0095","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html"},{"name":"RHSA-2009:1238","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"http://www.redhat.com/support/errata/RHSA-2009-1238.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-2958","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"36563","refsource":"SECUNIA","url":"http://secunia.com/advisories/36563"},{"name":"USN-827-1","refsource":"UBUNTU","url":"http://www.ubuntu.com/usn/USN-827-1"},{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=519020","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=519020"},{"name":"36120","refsource":"BID","url":"http://www.securityfocus.com/bid/36120"},{"name":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG","refsource":"CONFIRM","url":"http://www.thekelleys.org.uk/dnsmasq/CHANGELOG"},{"name":"oval:org.mitre.oval:def:9816","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9816"},{"name":"http://www.coresecurity.com/content/dnsmasq-vulnerabilities","refsource":"MISC","url":"http://www.coresecurity.com/content/dnsmasq-vulnerabilities"},{"name":"RHSA-2010:0095","refsource":"REDHAT","url":"https://rhn.redhat.com/errata/RHSA-2010-0095.html"},{"name":"RHSA-2009:1238","refsource":"REDHAT","url":"http://www.redhat.com/support/errata/RHSA-2009-1238.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-2958","datePublished":"2009-09-02T15:00:00.000Z","dateReserved":"2009-08-24T00:00:00.000Z","dateUpdated":"2024-08-07T06:07:37.397Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-09-02 15:30:01","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-399","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*","versionEndIncluding":"2.49","matchCriteriaId":"4C214CD9-059C-4211-A20F-A9C32D96EE5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.4:*:*:*:*:*:*:*","matchCriteriaId":"C940D03A-EAAB-4A9F-BAD9-F5B3A8B626F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.5:*:*:*:*:*:*:*","matchCriteriaId":"DFF93550-7A3C-4F8F-B242-EBA90F8DA820"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.6:*:*:*:*:*:*:*","matchCriteriaId":"EB34D798-1CE9-478E-ABF6-502AEB5153BE"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.7:*:*:*:*:*:*:*","matchCriteriaId":"83842D26-CD1A-4880-BFB2-A29C681DEF54"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.95:*:*:*:*:*:*:*","matchCriteriaId":"37F2C4F7-183F-43A6-AB7E-D7A11E8FA6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.96:*:*:*:*:*:*:*","matchCriteriaId":"D5BB5AEA-8B22-4F2A-A7B2-B974475C92D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.98:*:*:*:*:*:*:*","matchCriteriaId":"94C97061-04B7-42F9-8C82-B405C3AD0614"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.992:*:*:*:*:*:*:*","matchCriteriaId":"1936D4A9-A8DF-4DCE-94CA-027C40E86E62"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:0.996:*:*:*:*:*:*:*","matchCriteriaId":"9E8954FA-4913-47A1-8FAD-A2D1E9CAF8D8"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.0:*:*:*:*:*:*:*","matchCriteriaId":"E34FF38A-8B3B-4299-911D-FBB0DC6AC700"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.2:*:*:*:*:*:*:*","matchCriteriaId":"4DFBABB9-056D-45EB-87F6-47A25C5A0297"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.3:*:*:*:*:*:*:*","matchCriteriaId":"2263A232-EAA9-49DC-B91F-2F73C45AA68B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.4:*:*:*:*:*:*:*","matchCriteriaId":"869D7B02-6EA7-4A7D-B6CA-93BD2E057784"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.5:*:*:*:*:*:*:*","matchCriteriaId":"1D90FB55-73CB-4F99-92C6-99AD49872CEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.6:*:*:*:*:*:*:*","matchCriteriaId":"7CE1A634-20CF-43A0-9441-E249C09D1938"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.7:*:*:*:*:*:*:*","matchCriteriaId":"DE397BC5-E523-4048-8B75-A332B618C64D"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.8:*:*:*:*:*:*:*","matchCriteriaId":"CC86CFA8-7019-481D-B6ED-F4152DA64C85"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.9:*:*:*:*:*:*:*","matchCriteriaId":"48EFFFBE-15EB-4A17-A285-A7299D771391"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.10:*:*:*:*:*:*:*","matchCriteriaId":"9CAF4136-4587-4C1D-B303-518820A6E17A"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.11:*:*:*:*:*:*:*","matchCriteriaId":"8CD4F393-64A2-42AD-8CBA-80F9FBC3307A"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.12:*:*:*:*:*:*:*","matchCriteriaId":"17C26CD9-9357-4275-A46B-D63A5C20EDE1"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.13:*:*:*:*:*:*:*","matchCriteriaId":"D5CC931A-3B4D-4E0C-AB80-DCBB18260079"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.14:*:*:*:*:*:*:*","matchCriteriaId":"2E80EE61-3271-4BB6-BCBD-F85492B2B865"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.15:*:*:*:*:*:*:*","matchCriteriaId":"07B539B5-ACCD-4BDC-962E-7E9FCE33D263"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.16:*:*:*:*:*:*:*","matchCriteriaId":"1537C31B-FB1A-40AC-8FFF-033B3CBD236B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.17:*:*:*:*:*:*:*","matchCriteriaId":"86965249-76A4-4963-AD92-CE244E1EC6F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:1.18:*:*:*:*:*:*:*","matchCriteriaId":"CE2B2312-A4F9-422E-89EC-687D26500B39"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.0:*:*:*:*:*:*:*","matchCriteriaId":"955C42CA-93C0-41B5-9687-1F8476BA9846"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.1:*:*:*:*:*:*:*","matchCriteriaId":"D463C1BC-35A9-4AD7-8908-BBB293CE2FE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.2:*:*:*:*:*:*:*","matchCriteriaId":"2A3F0716-7898-40AC-8E25-B93CA64A04E6"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.3:*:*:*:*:*:*:*","matchCriteriaId":"F6FB1BA4-C1F9-44F4-8048-33CC26AD1C95"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.4:*:*:*:*:*:*:*","matchCriteriaId":"C6730AA2-C4EE-4FE6-BA20-CBC58EDD16B1"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.5:*:*:*:*:*:*:*","matchCriteriaId":"61593637-2CD7-48A1-A31C-E5DE62424B26"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.6:*:*:*:*:*:*:*","matchCriteriaId":"52309F28-53FD-438C-9913-7228B8387DE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.7:*:*:*:*:*:*:*","matchCriteriaId":"B252C33B-0144-4737-B34E-761B227F9EF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.8:*:*:*:*:*:*:*","matchCriteriaId":"B2C6DA43-93AC-462B-81E7-6A6819AF8988"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.9:*:*:*:*:*:*:*","matchCriteriaId":"8BFBF5E9-7287-4B1D-AD78-0E30A5E2F0E9"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.10:*:*:*:*:*:*:*","matchCriteriaId":"58DB4CAB-2ED9-473A-8B36-FA4F941A8281"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.11:*:*:*:*:*:*:*","matchCriteriaId":"644F05EE-9019-4BD8-9F2C-5DEF2E8FE486"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.12:*:*:*:*:*:*:*","matchCriteriaId":"07A3613F-A4FC-4643-A155-27A6BAB890C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.13:*:*:*:*:*:*:*","matchCriteriaId":"2F74BAF2-F875-4394-9447-9201520E65A2"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.14:*:*:*:*:*:*:*","matchCriteriaId":"96141817-BC07-4643-8E57-63445E65F720"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.15:*:*:*:*:*:*:*","matchCriteriaId":"C391DF4E-9FA3-44FE-AF61-52461EC209C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.16:*:*:*:*:*:*:*","matchCriteriaId":"F06E581B-2A84-4145-91DC-2B9D4ADC227B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.17:*:*:*:*:*:*:*","matchCriteriaId":"CAC75365-A06A-4EF2-A54D-2595B480C9DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.18:*:*:*:*:*:*:*","matchCriteriaId":"34412174-A7A5-4D8A-8D04-BB187594852B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.19:*:*:*:*:*:*:*","matchCriteriaId":"8BC0DDCD-5AE5-4F4C-9C17-97803CCB8810"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.20:*:*:*:*:*:*:*","matchCriteriaId":"14FAD4A7-FB21-4B37-9403-09D2CCF68888"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.21:*:*:*:*:*:*:*","matchCriteriaId":"D7A05414-B0DC-4D7B-B542-ACF407822EE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.22:*:*:*:*:*:*:*","matchCriteriaId":"F5C8F897-1A9F-4D25-A42B-8F31DD14E2C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.23:*:*:*:*:*:*:*","matchCriteriaId":"5505D0A5-9D21-4563-81AA-7CAB3D369514"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.24:*:*:*:*:*:*:*","matchCriteriaId":"DCC53D53-4652-40D4-8F9A-D704BCEABDA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.25:*:*:*:*:*:*:*","matchCriteriaId":"4ADECE43-F034-43E5-AA84-3EB336877DEC"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.26:*:*:*:*:*:*:*","matchCriteriaId":"78F10EE3-93C4-4FF5-874D-BEDD9E3F3A93"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.27:*:*:*:*:*:*:*","matchCriteriaId":"0603A8CB-3096-4A68-8B9E-4512A9E8D210"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.28:*:*:*:*:*:*:*","matchCriteriaId":"C29425C5-EBDF-4092-8A47-9D0A00122B5C"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.29:*:*:*:*:*:*:*","matchCriteriaId":"36FDAB2B-740B-4AA8-AF48-DB7FA69E5F9B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.30:*:*:*:*:*:*:*","matchCriteriaId":"DED55642-B6EA-437E-9DA3-23A77C3D2131"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.31:*:*:*:*:*:*:*","matchCriteriaId":"65412752-9C17-4DAC-A623-FA6AAF36A303"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.33:*:*:*:*:*:*:*","matchCriteriaId":"DB334E27-499F-4C42-BDA7-3E62EE7CE562"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.34:*:*:*:*:*:*:*","matchCriteriaId":"BBE126DF-AF32-4146-82D0-64D7423155DC"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.35:*:*:*:*:*:*:*","matchCriteriaId":"1B6ACF5F-43D6-442E-9846-CCCF37DB4F5A"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.36:*:*:*:*:*:*:*","matchCriteriaId":"8995A4B1-C576-443B-BA96-6FC39E63A7BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.37:*:*:*:*:*:*:*","matchCriteriaId":"0E1AF984-B7BA-4F1A-BDA2-DBF66E3FB320"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.38:*:*:*:*:*:*:*","matchCriteriaId":"0F34176B-9712-4F36-8C4F-B2FAD72B4441"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.39:*:*:*:*:*:*:*","matchCriteriaId":"F978EB99-7E43-4E2D-92B5-F09AFBB80949"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.40:*:*:*:*:*:*:*","matchCriteriaId":"A15AC9BA-102F-401B-A7C7-D2B1AF81F795"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.41:*:*:*:*:*:*:*","matchCriteriaId":"A1DE877B-54A3-4631-ABA8-29BAB4D3DD6D"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.42:*:*:*:*:*:*:*","matchCriteriaId":"9BE68B29-59F7-443A-A185-A11DE153D969"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.43:*:*:*:*:*:*:*","matchCriteriaId":"00A857D2-A159-4577-AF8B-51742256DC59"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.44:*:*:*:*:*:*:*","matchCriteriaId":"09679031-5CDD-46DC-9FD9-7C3459775D55"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.45:*:*:*:*:*:*:*","matchCriteriaId":"A9DE3027-9521-491F-B982-402D191214EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.46:*:*:*:*:*:*:*","matchCriteriaId":"8AF13585-74CE-4B62-BB29-8F7E5FABB66B"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.47:*:*:*:*:*:*:*","matchCriteriaId":"3C2ECBD5-AF65-402E-80FE-BAF1144B3C29"},{"vulnerable":true,"criteria":"cpe:2.3:a:thekelleys:dnsmasq:2.48:*:*:*:*:*:*:*","matchCriteriaId":"558DDC2F-DAF6-42BE-B36A-D998EBADBC95"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"2958","Ordinal":"1","Title":"CVE-2009-2958","CVE":"CVE-2009-2958","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"2958","Ordinal":"1","NoteData":"The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.","Type":"Description","Title":"CVE-2009-2958"},{"CveYear":"2009","CveId":"2958","Ordinal":"2","NoteData":"2009-09-02","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"2958","Ordinal":"3","NoteData":"2017-09-18","Type":"Other","Title":"Modified"}]}}}