NetSight
IP …
medium5.0Public exploit code

CVE-2008-4194

The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long DNS reply…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."

Affected products

VendorProductAffected versions
PdnsdPdnsd
through 1.2.6-par
Versions 1.1.7, 1.1.7a, 1.1.8b1-par4, 1.1.8b1-par5, 1.1.8b1-par6

Weakness classification

CWE-399

References