Leafnode is a niche NNTP (Network News Transfer Protocol) server software that maintains a small, focused vulnerability footprint concentrated in its single core product. The observed weakness classes are classified as miscellaneous issues in NVD taxonomy, reflecting the limited detail available for this legacy news infrastructure component. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Leafnode over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2005-1911MEDIUM The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP servers to cause a denial of service (news lo | Jun 9, 2005 | 5.0 | 15 | NO | NO |
CVE-2005-1453MEDIUM fetchnews in leafnode 1.9.48 to 1.11.1 allows remote NNTP servers to cause a denial of service (crash) by closing the connection while fetchnews is reading (1) an article header or | May 5, 2005 | 5.0 | 15 | NO | NO |
CVE-2004-2068MEDIUM fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers. | Dec 31, 2004 | 5.0 | 15 | NO | NO |
CVE-2003-0744MEDIUM The fetchnews NNTP client in leafnode 1.9.3 to 1.9.41 allows remote attackers to cause a denial of service (process hang and termination) via certain malformed Usenet news articles | Oct 20, 2003 | 5.0 | 15 | NO | NO |
CVE-2002-1661MEDIUM The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group who | Dec 31, 2002 | 5.0 | 15 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Leafnode.
Media articles that mention a CVE ID that affects a product developed by Leafnode — matched by CVE ID, not by vendor name.