CVE-2006-2076

MEDIUM 5.0CVE-2006-2076 · Published 27/04/2006 · updated 16/06/2026

In short

CVE-2006-2076 is a MEDIUM (CVSS 5.0) vulnerability affecting pdnsd (pdnsd).
Chance of exploitation in the next 30 days (EPSS): 4.9%, higher than 92.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pdnsd pdnsd	`= 1.0.13= 1.0.15= 1.1= 1.1.1= 1.1.10_par= 1.1.11_par= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7a= 1.1.8b1_par5= 1.1.8b1_par6= 1.1.8b1_par8= 1.2.1_par= 1.2.2_par= 1.2.3_par`	No fix yet

Description

Memory leak in Paul Rombouts pdnsd before 1.2.4 allows remote attackers to cause a denial of service (memory consumption) via a DNS query with an unsupported (1) QTYPE or (2) QCLASS, as demonstrated by the OUSPG PROTOS DNS test suite.

References

secunia.com/advisories/19835
secunia.com/advisories/20055
securitytracker.com/id · Patch
gentoo.org/security/en/glsa/glsa-200605-10.xml
kb.cert.org/vuls/id/955777 · US Government Resource
niscc.gov.uk/niscc/docs/br-20060425-00311.html · Vendor Advisory
niscc.gov.uk/niscc/docs/re-20060425-00312.pdf · Vendor Advisory
phys.uu.nl/~rombouts/pdnsd.html
securityfocus.com/bid/17694 · Patch
vupen.com/english/advisories/2006/1505
vupen.com/english/advisories/2006/1528
exchange.xforce.ibmcloud.com/vulnerabilities/26081

More vulnerabilities in pdnsd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free