CVE-2005-0037: Medium severity DNRD dnrd vulnerability
Published Dec 31, 2005
·Updated
The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.
Affected Software
15 affected components
DNRD dnrd=1.0
DNRD dnrd=1.1
DNRD dnrd=1.2
DNRD dnrd=1.3
DNRD dnrd=1.4
DNRD dnrd=2.0
DNRD dnrd=2.1
DNRD dnrd=2.2
DNRD dnrd=2.3
DNRD dnrd=2.4
DNRD dnrd=2.5
DNRD dnrd=2.6
DNRD dnrd=2.7
DNRD dnrd=2.8
DNRD dnrd=2.9
Remediation
Patch Available
Event History
Dec 31, 2005
CVE Published
05:00 AM
Apr 28, 2006
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0037?
CVE-2005-0037 has a severity level that can lead to a denial of service due to an infinite loop caused by malformed DNS packets.
2
What versions of DNRD are affected by CVE-2005-0037?
CVE-2005-0037 affects DNRD versions 1.0 through 2.9.
3
How do I fix CVE-2005-0037?
To fix CVE-2005-0037, upgrade to a patched version of DNRD that is above 2.9.
4
What is the impact of CVE-2005-0037?
The impact of CVE-2005-0037 includes potential denial of service attacks against systems running vulnerable versions of DNRD.
5
Is CVE-2005-0037 exploitable remotely?
Yes, CVE-2005-0037 is exploitable remotely through specially crafted compressed DNS packets.