Adns

This hub aggregates every CVE we track for Adns, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 8 most recently published vulnerabilities affecting Adns.

• CVE-2017-9103An issue was discovered in adns before 1.5.2. pap_mailbox822 does not properly check st from adns__findlabel_next. Without this, an uninitialised stack value can be used as the first label length. ...9.8Jun 18, 2020
• CVE-2017-9104An issue was discovered in adns before 1.5.2. It hangs, eating CPU, if a compression pointer loop is encountered.9.8Jun 18, 2020
• CVE-2017-9105An issue was discovered in adns before 1.5.2. It corrupts a pointer when a nameserver speaks first because of a wrong number of pointer dereferences. This bug may well be exploitable as a remote co...8.8Jun 18, 2020
• CVE-2017-9106An issue was discovered in adns before 1.5.2. adns_rr_info mishandles a bogus *datap. The general pattern for formatting integers is to sprintf into a fixed-size buffer. This is correct if the inpu...7.5Jun 18, 2020
• CVE-2017-9107An issue was discovered in adns before 1.5.2. It overruns reading a buffer if a domain ends with backslash. If the query domain ended with \, and adns_qf_quoteok_query was specified, qdparselabel w...7.5Jun 18, 2020
• CVE-2017-9108An issue was discovered in adns before 1.5.2. adnshost mishandles a missing final newline on a stdin read. It is wrong to increment used as well as setting r, since used is incremented according to...7.5Jun 18, 2020
• CVE-2017-9109An issue was discovered in adns before 1.5.2. It fails to ignore apparent answers before the first RR that was found the first time. when this is fixed, the second answer scan finds the same RRs at...9.8Jun 18, 2020
• CVE-2008-4100GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than ...6.4Sep 18, 2008