PatchTheCVEleafnode vulnerabilities and fixes
Recent CVEs affecting leafnode, with upgrade or downgrade steps. 5 tracked.
leafnode has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-06-09. Highest priority: CVE-2002-1661 (score 38/100).
- CVE-2005-1911 MEDIUM 5.0 DOWNGRADE The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives,
- CVE-2005-1453 MEDIUM 5.0 DOWNGRADE fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by clos
- CVE-2004-2068 MEDIUM 5.0 DOWNGRADE fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) v
- CVE-2003-0744 MEDIUM 5.0 DOWNGRADE The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service (pr
- CVE-2002-1661 MEDIUM 5.0 DOWNGRADE The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinit
FAQ
How do I fix leafnode vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is leafnode being exploited right now?
None of the tracked leafnode CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which leafnode CVE should I patch first?
CVE-2002-1661 currently ranks highest (38/100): The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinit.