Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| maradns | maradns | 0.5.30 |
| dnrd | dnrd | 1.2 |
| dnrd | dnrd | 2.9 |
| posadis | posadis | 0.50.5 |
| delegate | delegate | 7.8.0 |
| axis | 2110_network_camera | 2.31 |
| delegate | delegate | 8.4.0 |
| axis | 2120_network_camera | 2.31 |
| dnrd | dnrd | 2.5 |
| axis | 2120_network_camera | 2.40 |
| axis | 2100_network_camera | 2.12 |
| axis | 2100_network_camera | 2.40 |
| dnrd | dnrd | 2.7 |
| axis | 2460_network_dvr | 3.12 |
| dnrd | dnrd | 2.1 |
| don_moore | mydns | 0.6 |
| dnrd | dnrd | 1.3 |
| axis | 2420_network_camera | 2.33 |
| axis | 2420_network_camera | 2.12 |
| delegate | delegate | 8.9.5 |
| delegate | delegate | 8.9.3 |
| axis | 2420_network_camera | 2.41 |
| delegate | delegate | 8.3.3 |
| axis | 2110_network_camera | 2.40 |
| qbik | wingate | 4.0.1 |
| dnrd | dnrd | 2.0 |
| qbik | wingate | 6.0.1_build_995 |
| maradns | maradns | 0.5.28 |
| axis | 2401_video_server | 3.12 |
| delegate | delegate | 8.9.4 |
| axis | 2400_video_server | 3.11 |
| axis | 2420_network_camera | 2.30 |
| dnrd | dnrd | 2.8 |
| don_moore | mydns | 0.10.0 |
| dnrd | dnrd | 2.4 |
| axis | 2100_network_camera | 2.03 |
| delegate | delegate | 8.9.1 |
| axis | 2100_network_camera | 2.33 |
| axis | 2420_network_camera | 2.32 |
| axis | 2110_network_camera | 2.30 |
| delegate | delegate | 7.7.1 |
| don_moore | mydns | 0.8 |
| qbik | wingate | 6.0 |
| delegate | delegate | 8.3.4 |
| axis | 2100_network_camera | 2.41 |
| axis | 2400_video_server | 3.12 |
| dnrd | dnrd | 2.2 |
| pliant | pliant_dns_server | * |
| axis | 2110_network_camera | 2.41 |
| axis | 2100_network_camera | 2.30 |
| dnrd | dnrd | 1.4 |
| axis | 2120_network_camera | 2.30 |
| axis | 2100_network_camera | 2.01 |
| posadis | posadis | m5pre2 |
| axis | 2100_network_camera | 2.02 |
| qbik | wingate | 4.1_beta_a |
| posadis | posadis | 0.50.7 |
| posadis | posadis | 0.50.6 |
| maradns | maradns | 0.5.29 |
| axis | 2100_network_camera | 2.0 |
| axis | 2420_network_camera | 2.34 |
| delegate | delegate | 8.5.0 |
| don_moore | mydns | 0.7 |
| don_moore | mydns | 0.9 |
| qbik | wingate | 3.0 |
| posadis | posadis | 0.50.8 |
| delegate | delegate | 7.7.0 |
| delegate | delegate | 8.9.2 |
| dnrd | dnrd | 2.3 |
| dnrd | dnrd | 2.10 |
| posadis | posadis | 0.60.1 |
| axis | 2420_network_camera | 2.31 |
| axis | 2120_network_camera | 2.34 |
| axis | 2110_network_camera | 2.12 |
| axis | 2120_network_camera | 2.32 |
| team_johnlong | raidendnsd | * |
| axis | 2120_network_camera | 2.12 |
| posadis | posadis | m5pre1 |
| maradns | maradns | 0.5.31 |
| posadis | posadis | 0.50.9 |
| axis | 2420_network_camera | 2.40 |
| dnrd | dnrd | 2.6 |
| axis | 2100_network_camera | 2.32 |
| axis | 2100_network_camera | 2.31 |
| axis | 2120_network_camera | 2.41 |
| delegate | delegate | 8.9 |
| delegate | delegate | 7.8.2 |
| posadis | posadis | 0.60.0 |
| delegate | delegate | 7.9.11 |
| axis | 2100_network_camera | 2.34 |
| posadis | posadis | 0.50.4 |
| dnrd | dnrd | 1.0 |
| dnrd | dnrd | 1.1 |
| maradns | maradns | 0.8.05 |
| axis | 2110_network_camera | 2.34 |
| qbik | wingate | 6.0.1_build_993 |
| axis | 2110_network_camera | 2.32 |
| delegate | delegate | 7.8.1 |
Unspecified "critical denial-of-service vulnerability" in MyDNS before 1.1.0 has unknown impact and attack vectors.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| don_moore | mydns | 0.11.0 |
| don_moore | mydns | 0.10.3 |
| don_moore | mydns | 0.9.12 |
| don_moore | mydns | 0.9.0 |
| don_moore | mydns | 0.10.4 |
| don_moore | mydns | 0.8.2 |
| don_moore | mydns | 0.9.9 |
| don_moore | mydns | 0.8.1 |
| don_moore | mydns | 0.10.2 |
| don_moore | mydns | 0.7 |
| don_moore | mydns | 1.0.0 |
| don_moore | mydns | 0.10.1 |
| don_moore | mydns | 0.9.1 |
| don_moore | mydns | 0.10.0 |
| don_moore | mydns | 0.9.5 |
| don_moore | mydns | 0.9.2 |
| don_moore | mydns | 0.7.1 |
| don_moore | mydns | 0.9.10 |
| don_moore | mydns | 0.9.8 |
| don_moore | mydns | 0.8 |
| don_moore | mydns | 0.9.7 |
| don_moore | mydns | 0.9.13 |
| don_moore | mydns | 0.8.3 |
| don_moore | mydns | 0.9.3 |
| don_moore | mydns | 0.9.6 |
| don_moore | mydns | 0.6 |
Unspecified vulnerability in MyDNS 1.1.0 allows remote attackers to cause a denial of service via a crafted DNS message, aka "Query-of-death," as demonstrated by the OUSPG PROTOS DNS test suite.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| don_moore | mydns | 1.1.0 |