CVE-2008-3910: Hsc DNS2TCP

High severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days.

dns2tcp before 0.4.1 does not properly handle negative values in a certain length field in the input argument to the (1) dns_simple_decode or (2) dns_decode function, which allows remote attackers to overwrite a buffer and have unspecified other impact.

Affected products

• Hsc DNS2TCP: up to and including 0.4

Published 2008-09-04. Last modified 2026-06-16.