{"id":"CVE-2014-3484","aliases":["DEBIAN-CVE-2014-3484","EUVD-2014-3491","GHSA-j83j-g9hw-7wvp","MGASA-2014-0262","UBUNTU-CVE-2014-3484","USN-4768-1"],"status":"published","title":"Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl...","description":"Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a denial of service (crash) via an invalid name length in a DNS response, related to an infinite loop with no output.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02223,"percentile":0.82817,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2014-06-18T17:55:16Z","modified":"2026-10-23T16:01:27Z","fixes":[{"ecosystem":"Debian:12","package":"musl","fixed_in":["1.1.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"musl","fixed_in":["1.1.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"musl","fixed_in":["1.1.4-1"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"musl","fixed_in":["0.9.14-2.1.mga4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"musl","fixed_in":["0.9.15-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.4-1"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.14-2.1.mga4"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.15-1ubuntu0.1~esm1"}]}],"versions":["0.9.14-2","0.9.14-2ubuntu1","0.9.15-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.15-1ubuntu0.1~esm1"}]}],"versions":["0.9.14-2","0.9.14-2ubuntu1","0.9.15-1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.9-1ubuntu0.1~esm2"}]}],"versions":["1.1.9-1"],"bundled":5}],"products":[{"vendor":"musl-libc","product":"musl"}],"references":[{"url":"http://seclists.org/oss-sec/2014/q2/495","tags":["x_refsource_MISC","x_transferred","Mailing List","Patch","Third Party Advisory","advisory","article","fix","web"]},{"url":"http://git.musl-libc.org/cgit/musl/commit/?id=b3d9e0b94ea73c68ef4169ec82c898ce59a4e30a","tags":["x_refsource_MISC","x_transferred","Patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-3484"},{"url":"https://github.com/advisories/GHSA-j83j-g9hw-7wvp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-3484","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2014-0262.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13499","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-3484","tags":["report"]},{"url":"https://marc.info/?l=oss-security\u0026m=140210606626487\u0026w=2","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-3484","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4768-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-1817","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-8859","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15650","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1000001","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-3484","description":"Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a denial of service (crash) via an invalid name length in a DNS response, related to an infinite loop with no output.","status":"published","published":"2020-02-20T03:37:59Z","modified":"2024-08-06T10:43:06.347Z","updated_at":"2026-11-02T14:33:44.569327Z"}],"euvd":[{"id":"EUVD-2014-3491","description":"Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a denial of service (crash) via an invalid name length in a DNS response, related to an infinite loop with no output.","status":"published","published":"2020-02-20T03:37:59Z","modified":"2024-08-06T10:43:06Z","updated_at":"2026-11-03T01:57:10.864648Z"}],"ghsa":[{"id":"GHSA-j83j-g9hw-7wvp","title":"Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl...","description":"Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a denial of service (crash) via an invalid name length in a DNS response, related to an infinite loop with no output.","status":"published","published":"2022-05-17T19:57:31Z","modified":"2023-01-28T05:05:19Z","updated_at":"2026-11-02T14:44:20.029387Z"}],"nvd":[{"id":"CVE-2014-3484","description":"Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a denial of service (crash) via an invalid name length in a DNS response, related to an infinite loop with no output.","status":"published","published":"2020-02-20T04:15:10.82Z","modified":"2026-06-17T00:08:17.12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:02:59.461996Z"}],"osv":[{"id":"CVE-2014-3484","description":"Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a denial of service (crash) via an invalid name length in a DNS response, related to an infinite loop with no output.","status":"published","published":"2020-02-20T04:15:10Z","modified":"2026-04-16T06:24:26.816067828Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DEBIAN-CVE-2014-3484","description":"Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a denial of service (crash) via an invalid name length in a DNS response, related to an infinite loop with no output.","status":"published","published":"2020-02-20T04:15:10.82Z","modified":"2026-10-23T16:01:27.199215396Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"UBUNTU-CVE-2014-3484","description":"Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a denial of service (crash) via an invalid name length in a DNS response, related to an infinite loop with no output.","status":"published","published":"2020-02-20T04:15:00Z","modified":"2026-04-22T09:39:40.963564Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:09.010095Z"},{"id":"MGASA-2014-0262","title":"Updated musl package fixes CVE-2014-3484","description":"Updated musl package fixes security vulnerability:\n\nA remote stack-based buffer overflow has been found in musl libc's dns\nresponse parsing code. The overflow can be triggered in programs linked\nagainst musl libc and making dns queries via one of the standard interfaces\n(getaddrinfo, getnameinfo, gethostbyname, gethostbyaddr, etc.) if one of the\nconfigured nameservers in resolv.conf is controlled by an attacker, or if an\nattacker can inject forged udp packets with control over their contents.\nDenial of service is also possible via a related failure in loop detection\n(CVE-2014-3484).\n","status":"published","published":"2014-06-18T17:55:16Z","modified":"2026-04-16T06:25:36.844660046Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"USN-4768-1","title":"musl vulnerabilities","description":"It was discovered that musl did not properly handle kernel syscalls. An\nattacker could use this vulnerability to cause a denial of service (crash)\nor possibly execute arbitrary code. (CVE-2018-1000001)\n\nIt was discovered that musl did not properly handle the parsing of DNS\nresponse codes. A remote attacker could use this vulnerability to cause\nresource consumption (infinite loop), denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 14.04 ESM.\n(CVE-2014-3484)\n\nIt was discovered that musl did not properly handle the parsing of DNS\nresponse codes. A remote attacker could use this vulnerability to cause\nresource consumption (infinite loop), denial of service, or possibly\nexecute arbitrary code. This issue only affected Ubuntu 16.04 ESM.\n(CVE-2017-15650)\n\nIt was discovered that musl did not properly handle the parsing of ipv6\naddresses. An attacker could use this vulnerability to cause a denial of\nservice (crash) or possibly execute arbitrary code. This issue only affected\nUbuntu 14.04 ESM. (CVE-2015-1817)\n\nIt was discovered that TRE library, used by musl, did not properly handle\ncertain inputs. An attacker could use this vulnerability to cause a denial of\nservice (crash). (CVE-2016-8859)\n\n","status":"published","published":"2021-03-15T20:10:13Z","modified":"2026-06-29T13:48:11.652218356Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}