GCVE - cpe:2.3:a:dnrd:dnrd:1.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dnrd:dnrd:1.4:*:*:*:*:*:*:*

part: a version: 1.4 update: *

Vendor	Dnrd (`b6292bd1-bcb1-55a2-ba5b-687aa31a8aa4`)
Product	Dnrd (`d1ec19bf-eac1-5175-bd73-3b226b254b58`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:docker/uqeresearch/dnrd`	purl2cpe	2026-06-01 10:12:27.753710
`pkg:github/trustin/dnrd`	purl2cpe	2026-06-01 10:12:27.753712
`pkg:sourceforge/dnrd`	purl2cpe	2026-06-01 10:12:27.753713

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-2315`	vulnerable	2026-06-08 04:48:28.881076	Details available Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary code via a large number of large DNS packets with the Z and QR flags cleared. Published: 2006-04-28T10:00:00.000Z Updated: 2024-08-07T22:22:49.044Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1014557 http://secunia.com/advisories/16142 http://www.FreeBSD.org/ports/portaudit/e72fd82b-fa01-11d9-bc08-0001020eed82.html http://sourceforge.net/forum/forum.php?forum_id=482568	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0037`	vulnerable	2026-06-08 04:48:11.107574	Details available The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop. Published: 2006-04-28T01:00:00.000Z Updated: 2024-08-07T20:57:41.108Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/13729 http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en http://www.osvdb.org/25291 http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0789`	vulnerable	2026-06-08 04:47:51.194993	Details available Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet. Published: 2005-09-01T04:00:00.000Z Updated: 2024-08-08T00:31:46.847Z Open on db.gcve.eu Reference links http://secunia.com/advisories/13145 https://exchange.xforce.ibmcloud.com/vulnerabilities/17997 http://securitytracker.com/id?1012157 http://www.securityfocus.com/bid/11642 http://www.niscc.gov.uk/niscc/docs/al-20041130-00862.html?lang=en	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-0140`	vulnerable	2026-06-08 04:46:20.722257	Details available Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions. Published: 2002-03-15T05:00:00.000Z Updated: 2024-08-08T02:42:27.718Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/7957.php http://www.securityfocus.com/bid/3928 http://online.securityfocus.com/archive/1/251619	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Dnrd

Notes

PURL mappings

Vulnerability references

Contribute