CVE-2024-42643
Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial...
Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access.
- Record
CVE-2024-42643- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2024-39737
Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access.
- Record
EUVD-2024-39737- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g552-hxvr-6rpv
Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial...
Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access.
- Record
GHSA-g552-hxvr-6rpv- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
NVD
Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access.
- Record
CVE-2024-42643- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-42643
Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access.
- Record
DEBIAN-CVE-2024-42643- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-42643
Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access.
- Record
UBUNTU-CVE-2024-42643- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUSN-7370-1 No score
smartdns vulnerabilities
It was discovered that SmartDNS did not correctly align certain objects in memory, leading to undefined behaviour. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CVE-2024-24198, CVE-2024-24199)
It was discovered that SmartDNS did not correctly handle certain inputs, which could lead to an integer overflow. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2024-42643)
- Record
USN-7370-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
smartdnsDebian:12 |
All versions, plus listed versions 40+dfsg-142+dfsg-143+dfsg-145+dfsg-146+dfsg-1 Show 5 moreShow less46.1+dfsg-146.1+dfsg-1.146.1+dfsg-1.1~deb13u148.2+dfsg-148.3+dfsg-1 |
None known |
smartdnsDebian:13 |
All versions, plus listed versions 46.1+dfsg-146.1+dfsg-1.146.1+dfsg-1.1~deb13u148.2+dfsg-148.3+dfsg-1 |
None known |
smartdnsDebian:14 |
All versions, plus listed versions 46.1+dfsg-146.1+dfsg-1.146.1+dfsg-1.1~deb13u148.2+dfsg-148.3+dfsg-1 |
None known |
smartdnsUbuntu:Pro:24.04:LTS |
before 45+dfsg-1ubuntu0.1~esm1, plus listed versions 42+dfsg-143+dfsg-145+dfsg-145+dfsg-1build145+dfsg-1build2 |
45+dfsg-1ubuntu0.1~esm1 |
smartdnsUbuntu:25.10 |
All versions, plus listed versions 46+dfsg-1ubuntu146.1+dfsg-1 |
None known |
smartdnsUbuntu:26.10 |
All versions, plus listed versions 46.1+dfsg-1build146.1+dfsg-1.148.2+dfsg-148.3+dfsg-1 |
None known |
smartdnsUbuntu:26.04:LTS |
All versions, plus listed versions 46.1+dfsg-146.1+dfsg-1build1 |
None known |
smartdnsUbuntu:Pro:22.04:LTS |
before 35+dfsg-1ubuntu0.1~esm1, plus listed versions 33+dfsg-2.133+dfsg-2.1build135+dfsg-1 |
35+dfsg-1ubuntu0.1~esm1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-42643 is a high vulnerability (CVSS 7.5) in Smartdns Project Smartdns, published October 22, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 47th percentile. Fixed in smartdns 45+dfsg-1ubuntu0.1~esm1.
References
github.com/pymumu/smartdns/issues/1779
nvd.nist.gov/vuln/detail/CVE-2024-42643
security-tracker.debian.org/tracker/CVE-2024-42643
ubuntu.com/security/CVE-2024-42643
cve.org/CVERecord?id=CVE-2024-42643