CVE-2017-9430
CriticalSummary
A stack-based buffer overflow in dnstracer through version 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a command line with a long name argument mishandled in a strcpy call for argv[0].
Risk Assessment
An attacker can exploit this vulnerability to cause a service outage, potentially leading to application downtime. There is also a risk of unspecified side effects.
Recommendation
It is recommended to update dnstracer to the latest version to mitigate this vulnerability. Additionally, avoid launching dnstracer with untrusted name strings.
Original NVD description (English source)
Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a command line with a long name argument that is mishandled in a strcpy call for argv[0]. An example threat model is a web application that launches dnstracer with an untrusted name string.