CVE catalog

CVE-2024-42643

SmartDNS vulnerabilities

Integer Overflow in fast_ping.c in SmartDNS Release46 allows remote attackers to cause a Denial of Service via misaligned memory access.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	smartdns	sid	`48.3+dfsg-1`	vulnerable
Debian	smartdns	forky	`48.3+dfsg-1`	vulnerable
Debian	smartdns	trixie	`46.1+dfsg-1.1~deb13u1`	vulnerable
Debian	smartdns	bookworm	`40+dfsg-1`	vulnerable
Ubuntu	smartdns	noble	`45+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	smartdns	noble	Not reported	vulnerable

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	smartdns	source	sid	`(unfixed)`	not yet assigned	Not reported	[1086146]
Debian	smartdns	source	forky	`(unfixed)`	not yet assigned	Not reported	[1086146]
Debian	smartdns	source	trixie	`(unfixed)`	not yet assigned	Not reported	[1086146]
Debian	smartdns	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1086146]
Ubuntu	smartdns	deb	noble	`45+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported

[trixie] smartdns: Minor issue [bookworm] smartdns: minor issue; DoS

Observed: Oct 27, 2026, 1:06:58 AM UTC