fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers.
| Software | From | Fixed in |
|---|---|---|
| leafnode / leafnode | 1.9.26 | 1.9.26.x |
| leafnode / leafnode | 1.9.33 | 1.9.33.x |
| leafnode / leafnode | 1.9.46 | 1.9.46.x |
| leafnode / leafnode | 1.9.34 | 1.9.34.x |
| leafnode / leafnode | 1.9.42 | 1.9.42.x |
| leafnode / leafnode | 1.9.30 | 1.9.30.x |
| leafnode / leafnode | 1.9.44 | 1.9.44.x |
| leafnode / leafnode | 1.9.43 | 1.9.43.x |
| leafnode / leafnode | 1.9.41 | 1.9.41.x |
| leafnode / leafnode | 1.9.25 | 1.9.25.x |
| leafnode / leafnode | 1.9.28 | 1.9.28.x |
| leafnode / leafnode | 1.9.40 | 1.9.40.x |
| leafnode / leafnode | 1.9.27 | 1.9.27.x |
| leafnode / leafnode | 1.9.31 | 1.9.31.x |
| leafnode / leafnode | 1.9.37 | 1.9.37.x |
| leafnode / leafnode | 1.9.47 | 1.9.47.x |
| leafnode / leafnode | 1.9.39 | 1.9.39.x |
| leafnode / leafnode | 1.9.36 | 1.9.36.x |
| leafnode / leafnode | 1.9.32 | 1.9.32.x |
| leafnode / leafnode | 1.9.38 | 1.9.38.x |
| leafnode / leafnode | 1.9.45 | 1.9.45.x |
| leafnode / leafnode | 1.9.29 | 1.9.29.x |
| leafnode / leafnode | 1.9.35 | 1.9.35.x |