Back to Database
Status published
Medium
CVE-2008-4194
The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows...
Vulnerability Description
The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long DNS reply with many entries in the answer section, related to a "dangling pointer bug."
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-4194
Credits & Attribution
No credits recorded in the NVD database.
References
Affected Vendor
pdnsd
View all reports →Affected Software
pdnsd
Vulnerable Versions:
0, 1.1.7, 1.1.7a, 1.1.8b1-par4, 1.1.8b1-par5, 1.1.8b1-par6, 1.1.8b1-par7, 1.1.8b1-par8, 1.1.9-par, 1.1.10-par, 1.1.11-par, 1.1.11a-par, 1.2-par, 1.2.1_par, 1.2.4-par, 1.2.5-par
Timeline
Official Publish:
September 24th, 2008
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.