dnrd CVE Vulnerabilities & CVE List (5)

Products (CPE): — CVEs: 5

dnrd vulnerability overview

This page aggregates publicly disclosed CVE and security risk information related to dnrd, with CVSS, EPSS, publication dates, and vulnerability intelligence data to help assess potential risk and remediation priority.

Vulnerability distribution trend (last 24 months)

Showing 15 of 5 CVEs
«« First « Prev Page 1 / 1 Next »
CVE Summary Source Max CVSS EPSS % Published Updated
CVE-2005-2316 Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to cause a denial of service (infinite recursion) via a DNS packet that uses message compression in the QNAME and two pointers that point to each other (circular buffer). [email protected] 5.0 0.76% 2005-12-31 2026-04-16
CVE-2005-2315 Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary code via a large number of large DNS packets with the Z and QR flags cleared. [email protected] 7.5 4.90% 2005-12-31 2026-04-16
CVE-2005-0037 The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop. [email protected] 5.0 1.10% 2005-12-31 2026-04-16
CVE-2004-0789 Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet. [email protected] 5.0 1.96% 2004-12-31 2026-04-16
CVE-2002-0140 Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions. [email protected] 7.5 6.18% 2002-03-25 2026-04-16
«« First « Prev Page 1 / 1 Next »
cvelogic Threat Intelligence