VulnerabilityModified
CVE-2008-4392
Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority…
MEDIUM 6.4EPSS 1.69%
Does this matter?
Lower severity and a low EPSS score (1.69%). Track it; it rarely justifies an emergency change on its own.
Description
dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority (SOA) query.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
- EPSS
- 1.69% probability · 76th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362
- Affected
- d.j.bernstein/djbdns
- Source
- cret@cert.org
References
- http://secunia.com/advisories/33855Vendor Advisory
- http://www.securityfocus.com/bid/33818
- http://www.your.org/dnscache/Patch, Vendor Advisory
- http://www.your.org/dnscache/djbdns.pdfVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48807
- http://secunia.com/advisories/33855Vendor Advisory
- http://www.securityfocus.com/bid/33818
- http://www.your.org/dnscache/Patch, Vendor Advisory
- http://www.your.org/dnscache/djbdns.pdfVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48807
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.