CVE-2019-3979
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-3979
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated data attack. The router adds all A records to its DNS cache even when the records are unrelated to the domain that was queried. Therefore, a remote attacker controlled DNS server can poison the router's DNS cache via malicious responses with additional and untrue records.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
MikroTik RouterOS 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MikroTik RouterOS是拉脱维亚MikroTik公司的一套基于Linux开发的路由器操作系统。该系统可部署在PC中，使其提供路由器功能。 MikroTik RouterOS 6.45.6 Stable及之前版本和6.44.5 Long-term及之前版本中存在安全漏洞。远程攻击者可借助恶意的响应利用该漏洞污染路由器的DNS缓存。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | MikroTik RouterOS | RouterOS 6.45.6 Stable and below. RouterOS 6.44.5 Long-term and below. | - |
II. Public POCs for CVE-2019-3979
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-3979
Please Login to view more intelligence information
- https://www.tenable.com/security/research/tra-2019-46x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2019-3979
Same Patch Batch · n/a · 2019-10-28 · 33 CVEs total
| CVE-2019-17224 | Compal Broadband CH7465LG modem 路径遍历漏洞 | |
| CVE-2019-10743 | archiver 路径遍历漏洞 | |
| CVE-2019-10748 | Sequelize SQL注入漏洞 | |
| CVE-2019-3977 | MikroTik RouterOS 安全漏洞 | |
| CVE-2019-3978 | MikroTik RouterOS 访问控制错误漏洞 | |
| CVE-2019-3976 | MikroTik RouterOS 路径遍历漏洞 | |
| CVE-2012-2945 | Apache Hadoop 后置链接漏洞 | |
| CVE-2017-15725 | Dzone AnswerHub 代码问题漏洞 | |
| CVE-2019-14450 | Repetier-Server 路径遍历漏洞 | |
| CVE-2019-17181 | IntraSrv 缓冲区错误漏洞 | |
| CVE-2019-5536 | VMware ESXi、VMware Workstation和VMware Fusion 输入验证错误漏洞 | |
| CVE-2019-5538 | VMware vCenter Server Appliance 信任管理问题漏洞 | |
| CVE-2019-5537 | VMware vCenter Server Appliance 信任管理问题漏洞 | |
| CVE-2019-16897 | K7 Computing Antivirus Premium、Total Security和Ultimate Security 安全漏洞 | |
| CVE-2017-5731 | Tianocompress 缓冲区错误漏洞 | |
| CVE-2010-4245 | Pootle 跨站脚本漏洞 | |
| CVE-2019-16662 | rConfig 操作系统命令注入漏洞 | |
| CVE-2009-4900 | pixelpost 跨站脚本漏洞 | |
| CVE-2009-4899 | pixelpost SQL注入漏洞 | |
| CVE-2010-3293 | MailScanner 输入验证错误漏洞 |
Showing top 20 of 33 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2019-3979
No comments yet