Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Posadis 0.50.4 through 0.50.8 allows remote attackers to cause a denial of service (crash) via a DNS message without a question section, which triggers null dereference.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Posadis DNS请求问题区远程拒绝服务漏洞
Vulnerability Description
Posadis是一款开放源代码的DNS服务程序,设计目标是方便使用和配置,运行在Linux、Unix、Microsoft操作系统下。 Posadis在处理部分DNS请求时存在问题,远程攻击者可以利用这个漏洞对DNS服务程序进行拒绝服务攻击。 Posadis在检查DNS消息中是否包含问题区存在边界错误,通过发送恶意的DNS消息请求可以使DNS服务器崩溃。目前还不知道此漏洞是否可以用来在系统执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A