| Package | Affected versions | Patched versions |
|---|---|---|
| pdnsd | = 1.1.10-par= 1.1.11-par= 1.1.11a-par= 1.1.7= 1.1.7a= 1.1.8b1-par4= 1.1.8b1-par5= 1.1.8b1-par6= 1.1.8b1-par7= 1.1.8b1-par8= 1.1.9-par= 1.2-par= 1.2.1_par= 1.2.4-par= 1.2.5-par≤ 1.2.6-par |
The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free