CVE-2005-2315: Buffer Overflow
Published Dec 31, 2005
·Updated
Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary code via a large number of large DNS packets with the Z and QR flags cleared.
Affected Software
16 affected components
DNRD dnrd=1.0
DNRD dnrd=1.1
DNRD dnrd=1.2
DNRD dnrd=1.3
DNRD dnrd=1.4
DNRD dnrd=2.0
DNRD dnrd=2.1
DNRD dnrd=2.2
DNRD dnrd=2.3
DNRD dnrd=2.4
DNRD dnrd=2.5
DNRD dnrd=2.6
DNRD dnrd=2.7
DNRD dnrd=2.8
DNRD dnrd=2.9
DNRD dnrd=2.10
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2005
CVE Published
05:00 AM
Apr 28, 2006
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2315?
CVE-2005-2315 is considered to have a high severity due to its potential to allow remote code execution.
2
How do I fix CVE-2005-2315?
To fix CVE-2005-2315, upgrade to a version of Domain Name Relay Daemon (DNRD) that is 2.19.1 or later.
3
What software is affected by CVE-2005-2315?
CVE-2005-2315 affects versions of Domain Name Relay Daemon (DNRD) from 1.0 to 2.8.
4
Can CVE-2005-2315 be exploited remotely?
Yes, CVE-2005-2315 can be exploited remotely by attackers using specially crafted DNS packets.
5
What type of vulnerability is CVE-2005-2315?
CVE-2005-2315 is classified as a buffer overflow vulnerability.