Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary records via crafted zone data for this subdomain.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
djbdns超长响应报文远程缓存中毒漏洞
Vulnerability Description
djbdns是一个由Qmail的作者所设计的轻量级DNS server。 djbdns的response.c文件负责处理名称压缩。该文件12行对name_ptr数组有each<16384的标注，但response_addname()没有强制这个限制。如果用户向报文中编码的名称中第一个后缀大于或等于16384字节的话，response_addname()就会错误的编码到名称的偏移，生成畸形的响应报文。这种响应报文会给查询用户误导性信息，有助于攻击者执行中间人等网络欺骗攻击。
CVSS Information
N/A
Vulnerability Type
N/A