<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: dnrd</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2005-2316: Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to cause a denial of service (infinite r</title><link>https://patchthecve.com/cve/CVE-2005-2316.html</link><guid>https://patchthecve.com/cve/CVE-2005-2316.html</guid><pubDate>Tue, 16 Jun 2026 22:14:40 +0000</pubDate><description>MEDIUM 5.0: Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to cause a denial of service (infinite recursion) via a DNS packet that uses message compression in the QNAME and two pointers that point to each other (circular buffer).</description></item><item><title>CVE-2005-2315: Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary </title><link>https://patchthecve.com/cve/CVE-2005-2315.html</link><guid>https://patchthecve.com/cve/CVE-2005-2315.html</guid><pubDate>Tue, 16 Jun 2026 22:14:40 +0000</pubDate><description>HIGH 7.5: Buffer overflow in Domain Name Relay Daemon (DNRD) before 2.19.1 allows remote attackers to execute arbitrary code via a large number of large DNS packets with the Z and QR flags cleared.</description></item><item><title>CVE-2005-0037: The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compress</title><link>https://patchthecve.com/cve/CVE-2005-0037.html</link><guid>https://patchthecve.com/cve/CVE-2005-0037.html</guid><pubDate>Tue, 16 Jun 2026 22:10:23 +0000</pubDate><description>MEDIUM 5.0: The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.</description></item><item><title>CVE-2004-0789: Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2)</title><link>https://patchthecve.com/cve/CVE-2004-0789.html</link><guid>https://patchthecve.com/cve/CVE-2004-0789.html</guid><pubDate>Tue, 16 Jun 2026 22:06:22 +0000</pubDate><description>MEDIUM 5.0: Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men &amp; Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth</description></item><item><title>CVE-2002-0140: Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of servic</title><link>https://patchthecve.com/cve/CVE-2002-0140.html</link><guid>https://patchthecve.com/cve/CVE-2002-0140.html</guid><pubDate>Tue, 16 Jun 2026 21:56:52 +0000</pubDate><description>HIGH 7.5: Domain Name Relay Daemon (dnrd) 2.10 and earlier allows remote malicious DNS sites to cause a denial of service and possibly execute arbitrary code via a long or malformed DNS reply, which is not handled properly by parse_query, get_objectname, and possibly other functions.</description></item></channel></rss>