CVE-2008-4194
MEDIUM
5.0
CVSS Severity Score
Vulnerability Description
The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."
Affected Platforms (CPE)
📦
Pdnsd
Pdnsd
<= 1.2.6-par📦
Pdnsd
Pdnsd
= 1.1.7📦
Pdnsd
Pdnsd
= 1.1.7a📦
Pdnsd
Pdnsd
= 1.1.8b1-par4📦
Pdnsd
Pdnsd
= 1.1.8b1-par5📦
Pdnsd
Pdnsd
= 1.1.8b1-par6📦
Pdnsd
Pdnsd
= 1.1.8b1-par7📦
Pdnsd
Pdnsd
= 1.1.8b1-par8📦
Pdnsd
Pdnsd
= 1.1.9-par📦
Pdnsd
Pdnsd
= 1.1.10-par📦
Pdnsd
Pdnsd
= 1.1.11-par📦
Pdnsd
Pdnsd
= 1.1.11a-par📦
Pdnsd
Pdnsd
= 1.2-par📦
Pdnsd
Pdnsd
= 1.2.1_par📦
Pdnsd
Pdnsd
= 1.2.4-par📦
Pdnsd