CVSS: 7.5EPSS: 2%CPEs: 16EXPL: 1CVE-2005-2315
https://notcve.org/view.php?id=CVE-2005-2315
Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary code via a large number of large DNS packets with the Z and QR flags cleared. • http://secunia.com/advisories/16142 http://securitytracker.com/id?1014557 http://sourceforge.net/forum/forum.php?forum_id=482568 http://www.FreeBSD.org/ports/portaudit/e72fd82b-fa01-11d9-bc08-0001020eed82.html •
CVSS: 5.0EPSS: 1%CPEs: 24EXPL: 0CVE-2005-2316
https://notcve.org/view.php?id=CVE-2005-2316
Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to cause a denial of service (infinite recursion) via a DNS packet that uses message compression in the QNAME and two pointers that point to each other (circular buffer). • http://secunia.com/advisories/16142 http://securitytracker.com/id?1014557 http://sourceforge.net/forum/forum.php?forum_id=482568 http://www.FreeBSD.org/ports/portaudit/e72fd82b-fa01-11d9-bc08-0001020eed82.html •
CVSS: 5.0EPSS: 1%CPEs: 15EXPL: 0CVE-2005-0037
https://notcve.org/view.php?id=CVE-2005-0037
The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop. • http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en http://www.osvdb.org/25291 http://www.securityfocus.com/bid/13729 •
CVSS: 5.0EPSS: 1%CPEs: 98EXPL: 0CVE-2004-0789
https://notcve.org/view.php?id=CVE-2004-0789
Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet. • http://secunia.com/advisories/13145 http://securitytracker.com/id?1012157 http://www.niscc.gov.uk/niscc/docs/al-20041130-00862.html?lang=en http://www.niscc.gov.uk/niscc/docs/re-20041109-00957.pdf http://www.posadis.org/advisories/pos_adv_006.txt http://www.securityfocus.com/bid/11642 https://exchange.xforce.ibmcloud.com/vulnerabilities/17997 •
CVSS: 7.5EPSS: 0%CPEs: 16EXPL: 1CVE-2002-0140 – DNRD 1.x/2.x - DNS Request/Reply Denial of Service
https://notcve.org/view.php?id=CVE-2002-0140
Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions. Domain Name Relay Daemon (dnrd) 2.10 y versiones anteriores permiten a sitios maliciosos DNS remotos causar denegación de servicio y quizá la ejecución de código arbitrario mediante una réplica larga o defectuosa del DNS, el cual no es manejada adecuadamente por las funciones 'parse_query', 'get_objectname' y posiblemente otras. • https://www.exploit-db.com/exploits/21236 http://online.securityfocus.com/archive/1/251619 http://www.iss.net/security_center/static/7957.php http://www.securityfocus.com/bid/3928 •