| Package | Affected versions | Patched versions |
|---|---|---|
| delegate | = 7.7.0= 7.7.1= 7.8.0= 7.8.1= 7.8.2= 7.9.11= 8.3.3= 8.3.4= 8.4.0= 8.5.0= 8.9= 8.9.1= 8.9.2= 8.9.3= 8.9.4= 8.9.5 | |
| dnrd | = 1.0= 1.1= 1.2= 1.3= 1.4= 2.0= 2.1= 2.10= 2.2= 2.3= 2.4= 2.5= 2.6= 2.7= 2.8= 2.9 | |
| mydns | = 0.10.0= 0.6= 0.7= 0.8= 0.9 | |
| maradns | = 0.5.28= 0.5.29= 0.5.30= 0.5.31= 0.8.05 | |
| posadis | = 0.50.4= 0.50.5= 0.50.6= 0.50.7= 0.50.8= 0.50.9= 0.60.0= 0.60.1= m5pre1= m5pre2 | |
| wingate | = 3.0= 4.0.1= 4.1_beta_a= 6.0= 6.0.1_build_993= 6.0.1_build_995 |
Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free