CVE-2008-4392 dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofe...
MediumCVSS 6.4
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority (SOA) query.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| d.j.bernstein djbdns | = 1.05 | No fix listed |
| debian/djbdns(Debian:12) | < 1:1.05-10 | 1:1.05-10 |
| debian/djbdns(Debian:13) | < 1:1.05-10 | 1:1.05-10 |
| debian/djbdns(Debian:14) | < 1:1.05-10 | 1:1.05-10 |
| ubuntu/djbdns(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/djbdns(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/djbdns(Ubuntu:26.10) | All versions | No fix listed |
| ubuntu/djbdns(Ubuntu:22.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- 33855 third-party-advisory vendor-advisory
- 33818 vdb-entry
- www.your.org patch vendor-advisory
- www.your.org vendor-advisory
- djbdns-soa-spoofing(48807) vdb-entry
- Debian Security Tracker CVE-2008-4392 vendor-advisory
- bugs.debian.org issue-tracking