CVE-2008-2469

N/A Unknown

Published: October 23, 2008 Modified: April 23, 2026

Description

Heap-based buffer overflow in the SPF_dns_resolv_lookup function in Spf_dns_resolv.c in libspf2 before 1.2.8 allows remote attackers to execute arbitrary code via a long DNS TXT record with a modified length field.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://bugs.gentoo.org/show_bug.cgi?format=multiple&id=242254

Source: cret@cert.org

http://secunia.com/advisories/32396

Source: cret@cert.org

http://secunia.com/advisories/32450

Source: cret@cert.org

http://secunia.com/advisories/32496

Source: cret@cert.org

Vendor Advisory

http://secunia.com/advisories/32720

Source: cret@cert.org

http://security.gentoo.org/glsa/glsa-200810-03.xml

Source: cret@cert.org

http://securityreason.com/securityalert/4487

Source: cret@cert.org

http://up2date.astaro.com/2008/11/up2date_7305_released.html

Source: cret@cert.org

http://www.debian.org/security/2008/dsa-1659

Source: cret@cert.org

http://www.doxpara.com/?p=1263

Source: cret@cert.org

http://www.doxpara.com/?page_id=1256

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/183657

Source: cret@cert.org

US Government Resource

http://www.securityfocus.com/bid/31881

Source: cret@cert.org

Exploit Patch

http://www.vupen.com/english/advisories/2008/2896

Source: cret@cert.org

https://answers.launchpad.net/ubuntu/gutsy/+source/libspf2/1.2.5.dfsg-4ubuntu0.7.10.1

Source: cret@cert.org

https://bugs.launchpad.net/ubuntu/feisty/+source/libspf2/+bug/271025

Source: cret@cert.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/46055

Source: cret@cert.org

https://www.exploit-db.com/exploits/6805

Source: cret@cert.org

http://bugs.gentoo.org/show_bug.cgi?format=multiple&id=242254