Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2008-4194

The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.088
EPSS Ranking 92.1%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2008-4194
  • Pdnsd » Pdnsd » Version: Any
    cpe:2.3:a:pdnsd:pdnsd:*
  • Pdnsd » Pdnsd » Version: 1.1.10-par
    cpe:2.3:a:pdnsd:pdnsd:1.1.10-par
  • Pdnsd » Pdnsd » Version: 1.1.11-par
    cpe:2.3:a:pdnsd:pdnsd:1.1.11-par
  • Pdnsd » Pdnsd » Version: 1.1.11a-par
    cpe:2.3:a:pdnsd:pdnsd:1.1.11a-par
  • Pdnsd » Pdnsd » Version: 1.1.7
    cpe:2.3:a:pdnsd:pdnsd:1.1.7
  • Pdnsd » Pdnsd » Version: 1.1.7a
    cpe:2.3:a:pdnsd:pdnsd:1.1.7a
  • Pdnsd » Pdnsd » Version: 1.1.8b1-par4
    cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par4
  • Pdnsd » Pdnsd » Version: 1.1.8b1-par5
    cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par5
  • Pdnsd » Pdnsd » Version: 1.1.8b1-par6
    cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par6
  • Pdnsd » Pdnsd » Version: 1.1.8b1-par7
    cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par7
  • Pdnsd » Pdnsd » Version: 1.1.8b1-par8
    cpe:2.3:a:pdnsd:pdnsd:1.1.8b1-par8
  • Pdnsd » Pdnsd » Version: 1.1.9-par
    cpe:2.3:a:pdnsd:pdnsd:1.1.9-par
  • Pdnsd » Pdnsd » Version: 1.2-par
    cpe:2.3:a:pdnsd:pdnsd:1.2-par
  • Pdnsd » Pdnsd » Version: 1.2.1_par
    cpe:2.3:a:pdnsd:pdnsd:1.2.1_par
  • Pdnsd » Pdnsd » Version: 1.2.4-par
    cpe:2.3:a:pdnsd:pdnsd:1.2.4-par
  • Pdnsd » Pdnsd » Version: 1.2.5-par
    cpe:2.3:a:pdnsd:pdnsd:1.2.5-par


Contact Us

Shodan ® - All rights reserved