Vulnerabilities > CVE-2005-0037 - Remote Denial of Service vulnerability in Multiple Vendor DNS Message Decompression

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
dnrd

Summary

The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop. This vulnerability is addressed in the following product release: dnrd, dnrd, 2.10