CVEvulnerability

CVE-2008-4194

5.0 MEDIUM Published 2008-09-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-09-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-399

Description

The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."

Affected configurations

• pdnsd pdnsd (<= 1.2.6-par) • pdnsd pdnsd 1.1.7 • pdnsd pdnsd 1.1.7a • pdnsd pdnsd 1.1.8b1-par4 • pdnsd pdnsd 1.1.8b1-par5 • pdnsd pdnsd 1.1.8b1-par6 • pdnsd pdnsd 1.1.8b1-par7 • pdnsd pdnsd 1.1.8b1-par8 • pdnsd pdnsd 1.1.9-par • pdnsd pdnsd 1.1.10-par • pdnsd pdnsd 1.1.11-par • pdnsd pdnsd 1.1.11a-par • pdnsd pdnsd 1.2-par • pdnsd pdnsd 1.2.1 par • pdnsd pdnsd 1.2.4-par • pdnsd pdnsd 1.2.5-par

Related

Weakness · not in database (1)

References