CVE-2009-0858

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-03-09 · updated 2026-06-16
Weakness: CWE-20

Description

The response_addname function in response.c in Daniel J. Bernstein djbdns 1.05 and earlier does not constrain offsets in the required manner, which allows remote attackers, with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary records via crafted zone data for this subdomain.

Affected products

D.J.Bernstein Djbdns: through 1.05

References

http://it.slashdot.org/article.pl?sid=09/03/05/2014249
http://marc.info/?l=djbdns&m=123554945710038
http://marc.info/?l=djbdns&m=123613000920446&w=2
http://secunia.com/advisories/35820
http://securityandthe.net/2009/03/05/security-issue-in-djbdns-confirmed/
http://www.debian.org/security/2009/dsa-1831
http://www.securityfocus.com/archive/1/501294/100/0/threaded
http://www.securityfocus.com/archive/1/501340/100/0/threaded
http://www.securityfocus.com/archive/1/501479/100/0/threaded
http://www.securityfocus.com/bid/33937
https://exchange.xforce.ibmcloud.com/vulnerabilities/49003
http://it.slashdot.org/article.pl?sid=09/03/05/2014249

Get alerted when CVE-2009-0858 or the next vulnerability affects your stack