CVE-2008-4392

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-02-19 · updated 2026-06-16
Weakness: CWE-362

Description

dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority (SOA) query.

Affected products

D.J.Bernstein Djbdns: 1.05

References

http://secunia.com/advisories/33855
http://www.securityfocus.com/bid/33818
http://www.your.org/dnscache/
http://www.your.org/dnscache/djbdns.pdf
https://exchange.xforce.ibmcloud.com/vulnerabilities/48807
http://secunia.com/advisories/33855
http://www.securityfocus.com/bid/33818
http://www.your.org/dnscache/
http://www.your.org/dnscache/djbdns.pdf
https://exchange.xforce.ibmcloud.com/vulnerabilities/48807

Get alerted when CVE-2008-4392 or the next vulnerability affects your stack