Gnu Adns
8 CVEs affecting Gnu Adns. Latest disclosed: 2020-06-18. Critical: 3, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-9104 | Critical | 9.8 | 2020-06-18 | An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encountered. |
CVE-2017-9103 | Critical | 9.8 | 2020-06-18 | An issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from adns__findlabel_next. Without this, an uninitialised stack value c… |
CVE-2017-9109 | Critical | 9.8 | 2020-06-18 | An issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the first RR that was found the first time. when this is fixed, the se… |
CVE-2017-9105 | High | 8.8 | 2020-06-18 | An issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks first because of a wrong number of pointer dereferences. This bug… |
CVE-2017-9108 | High | 7.5 | 2020-06-18 | An issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a stdin read. It is wrong to increment used as well as setting r… |
CVE-2017-9107 | High | 7.5 | 2020-06-18 | An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with \, and adns_qf_quote… |
CVE-2017-9106 | High | 7.5 | 2020-06-18 | An issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general pattern for formatting integers is to sprintf into a fixed-si… |
CVE-2008-4100 | | 2008-09-18 | GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS resp… |