Vulnerability in Pdnsd

CVE-2008-4194

The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."

EPSS: 0.069 (93.4th percentile) — read the EPSS interpretation.

Affected products

  • Pdnsd — versions 1.1.7, 1.1.7a, 1.1.8b1-par4
  • N/a — versions n/a

Weakness classification (CWE)

References