Unscored severity · published May 22, 2009
CVE-2009-1755
Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote attackers to cause a denial…
–
CVSS
3.2%
EPSS
No
On KEV
Description
Off-by-one error in the packet_read_query_section function in packet.c in nsd 3.2.1, and process_query_section in query.c in nsd 2.3.7, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors that trigger a buffer overflow.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NS
Nsd · Nlnetlabs
2.0.0; 2.0.1; 2.0.2; 2.1.0; 2.1.1; 2.1.2; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1755
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1755
Patch
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529418
Patch
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=529420
Patch
http://www.nlnetlabs.nl/publications/NSD_vulnerability_announcement.html
www.openwall.com
http://www.openwall.com/lists/oss-security/2009/05/19/1
More from Nsd
9.1
CVE-2026-18664
Wrong interpretation of ACL ranges
8.8
CVE-2026-12244
Heap overflow and crash with crafted SVCB RR
8.1
CVE-2026-12246
Out of bounds stack write with crafted APL RR
7.5
CVE-2026-19538
Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS
7.5
CVE-2026-19401
Remote UDP DoS by sending multiple DNS Cookie options