The p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long DNS reply with many entries in the answer section, related to a dangling pointer bug.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pdnsd | Pdnsd | * | 1.2.6-par (including) |
| Pdnsd | Pdnsd | 1.1.7 (including) | 1.1.7 (including) |
| Pdnsd | Pdnsd | 1.1.7a (including) | 1.1.7a (including) |
| Pdnsd | Pdnsd | 1.1.8b1-par4 (including) | 1.1.8b1-par4 (including) |
| Pdnsd | Pdnsd | 1.1.8b1-par5 (including) | 1.1.8b1-par5 (including) |
| Pdnsd | Pdnsd | 1.1.8b1-par6 (including) | 1.1.8b1-par6 (including) |
| Pdnsd | Pdnsd | 1.1.8b1-par7 (including) | 1.1.8b1-par7 (including) |
| Pdnsd | Pdnsd | 1.1.8b1-par8 (including) | 1.1.8b1-par8 (including) |
| Pdnsd | Pdnsd | 1.1.9-par (including) | 1.1.9-par (including) |
| Pdnsd | Pdnsd | 1.1.10-par (including) | 1.1.10-par (including) |
| Pdnsd | Pdnsd | 1.1.11-par (including) | 1.1.11-par (including) |
| Pdnsd | Pdnsd | 1.1.11a-par (including) | 1.1.11a-par (including) |
| Pdnsd | Pdnsd | 1.2-par (including) | 1.2-par (including) |
| Pdnsd | Pdnsd | 1.2.1_par (including) | 1.2.1_par (including) |
| Pdnsd | Pdnsd | 1.2.4-par (including) | 1.2.4-par (including) |
| Pdnsd | Pdnsd | 1.2.5-par (including) | 1.2.5-par (including) |