Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

dnsmasq TFTP long filename can run attacker code

CVE-2009-2957 · published 17 years ago
Summary

The dnsmasq service, when configured with TFTP support, can be tricked by a remote user sending a very long file name. This overflow can let the attacker run their own code on the server. Update dnsmasq to version 2.50 or later, or disable the TFTP feature if it is not needed.

What to do
  • Update debian dnsmasq to version 2.50-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian dnsmasq < 2.50-1
Fix: upgrade to 2.50-1
Debian:13 debian dnsmasq < 2.50-1
Fix: upgrade to 2.50-1
Debian:14 debian dnsmasq < 2.50-1
Fix: upgrade to 2.50-1
– thekelleys dnsmasq <= 2.49
0.4
0.5
0.6
0.7
0.95
0.96
0.98
0.992
0.996
1.0
1.2
60 more version ranges
cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*
Original advisory text
Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a...
Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request.
References
Severity
6.8 Medium
Exploitation
15% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published2 Sep 2009
Updated31 Oct 2026
First seen17 Sep 2026
Sources
DEBIAN-CVE-2009-2957 · OSV
CVE-2009-2957 · NVD
Track software like this
Free during beta