CVE-2008-4194

The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."

Link	Resource
http://www.phys.uu.nl/~rombouts/pdnsd/ChangeLog
http://www.phys.uu.nl/~rombouts/pdnsd.html
http://www.vupen.com/english/advisories/2008/2582
https://exchange.xforce.ibmcloud.com/vulnerabilities/45594

Configuration 1

cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par5:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.2-par:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.2.4-par:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.2.5-par:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.2.1_par:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.1.7a:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.1.9-par:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.1.11-par:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par8:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par7:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par6:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.1.11a-par:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:*:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.1.10-par:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.1.7:*:*:*:*:*:*:* cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par4:*:*:*:*:*:*:*

---

Published : 2008-09-24 11:42

Updated : 2017-08-08 01:32

---

NVD link : CVE-2008-4194

Mitre link : CVE-2008-4194

No products.

CWE-399