Vulnerability in Leafnode

CVE-2004-2068

fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers.

EPSS: 0.016 (73.8th percentile) — read the EPSS interpretation.

Affected products

  • Leafnode — versions 1.9.25, 1.9.26, 1.9.27
  • N/a — versions n/a

References