Vulnerability in Leafnode

CVE-2005-1453

fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevents fetchnews from querying other servers.

EPSS: 0.014 (70.3th percentile) — read the EPSS interpretation.

Affected products

  • Leafnode — versions 1.9.48, 1.9.52, 1.9.53
  • N/a — versions n/a

References