Description
fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or (2) an article body, which also prevents fetchnews from querying other servers.
Metrics
CVSS 2.0 5.0/10
AV:N/AC:L/Au:N/C:N/I:N/A:PAffected software
No affected versions have been published.
Timeline
- Published
- May 5, 2005
- Last modified
- Jun 16, 2026
- NVD status
- Modified