Adns (Gnu) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2020-06-18. Vendor: Gnu.

CVEs of Adns

• CVE-2017-9104 - CVSS 9.8 (critical), 2020-06-18: An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encountered.
• CVE-2017-9103 - CVSS 9.8 (critical), 2020-06-18: An issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from adns__findlabel_next. Without this, an uninitialised stack value…
• CVE-2017-9106 - CVSS 7.5 (high), 2020-06-18: An issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general pattern for formatting integers is to sprintf into a…
• CVE-2017-9109 - CVSS 9.8 (critical), 2020-06-18: An issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the first RR that was found the first time. when this is fixed, the…
• CVE-2017-9105 - CVSS 8.8 (high), 2020-06-18: An issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks first because of a wrong number of pointer dereferences. This bug…
• CVE-2017-9108 - CVSS 7.5 (high), 2020-06-18: An issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a stdin read. It is wrong to increment used as well as setting r,…
• CVE-2017-9107 - CVSS 7.5 (high), 2020-06-18: An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with \, and…
• CVE-2008-4100 - CVSS 6.4 (medium), 2008-09-18: GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS…