Critical severity9.8NVD Advisory· Published Feb 5, 2026· Updated Jun 17, 2026

CVE-2020-37119

Description

Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious DNS query payload to trigger a three-byte overwrite, bypass ASLR, and execute shellcode through a carefully constructed exploit.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nsasoft/Nsauditor3 versions
cpe:2.3:a:nsasoft:nsauditor:3.0.28:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:nsasoft:nsauditor:3.0.28:*:*:*:*:*:*:*
- cpe:2.3:a:nsasoft:nsauditor:3.2.1.0:*:*:*:*:*:*:*
- (no CPE)range: 3.2.1.0
Nsauditor/Nsauditorllm-fuzzy
Range: 3.0.28, 3.2.1.0

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/48350nvdExploitThird Party AdvisoryVDB Entry
www.nsauditor.comnvdProduct
www.vulncheck.com/advisories/nsauditor-buffer-overflow-sehaslr-bypass-bytes-overwritenvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000