PatchTheCVEdnrd vulnerabilities and fixes
Recent CVEs affecting dnrd, with upgrade or downgrade steps. 5 tracked.
dnrd has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-12-31. Highest priority: CVE-2005-2315 (score 54/100).
- CVE-2005-2316 MEDIUM 5.0 DOWNGRADE Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to cause a denial of service (infinite r
- CVE-2005-2315 HIGH 7.5 DOWNGRADE Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary
- CVE-2005-0037 MEDIUM 5.0 DOWNGRADE The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compress
- CVE-2004-0789 MEDIUM 5.0 DOWNGRADE DOWNGRADE Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2)
- CVE-2002-0140 HIGH 7.5 DOWNGRADE Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of servic
FAQ
How do I fix dnrd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dnrd being exploited right now?
None of the tracked dnrd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dnrd CVE should I patch first?
CVE-2005-2315 currently ranks highest (54/100): Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary .