• info
• discussion
• exploit
• solution
• references

Paul A. Rombouts PDNSD DNS Query Denial Of Service Vulnerability

The pdnsd DNS server is prone to a remote denial-of-service vulnerability. This issue is due to a failure in the application to properly handle DNS queries.

An attacker can exploit this issue to consume excessive memory, and then to crash the affected service, effectively denying service to legitimate users.

The vendor has addressed this issue in version 1.2.4-par; earlier versions are reportedly vulnerable.