Is CVE-2023-31470 actively exploited?

No active exploitation of CVE-2023-31470 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2023-31470 be exploited remotely?

Yes. CVE-2023-31470 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2023-31470?

CVE-2023-31470 has a CVSS score of 9.8 (CRITICAL).

HOME VULNERABILITIESCVE-2023-31470

CRITICAL

CVE-2023-31470

CWE-787Published: April 28, 2023· Updated: Jun 17, 2026

9.8

CVSS v3.1

Official Description

SmartDNS through 41 before 56d0332 allows an out-of-bounds write because of a stack-based buffer overflow in the _dns_encode_domain function in the dns.c file, via a crafted DNS request.

NVD Source

Risk Analysis

SmartDNS is affected by a stack-based buffer overflow that leads to an out-of-bounds write when processing crafted DNS requests. This critical vulnerability carries a CVSS score of 9.8 and poses a significant risk to system stability and security.

No public exploit is currently known, and the vulnerability is not in CISA KEV. It is remotely exploitable via network-based DNS requests.

Recommended Action

Update SmartDNS to a version beyond 41 that includes the fix for the dns.c buffer overflow.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2023-31470 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.8.

From a weakness classification perspective (CWE-787): Out-of-bounds write vulnerabilities can lead to data corruption, crashes, or arbitrary code execution.