CVE-2008-4392: D.j.bernstein Djbdns

Medium severity, CVSS 6.4. EPSS: 1.7% chance of exploitation in the next 30 days.

dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent simultaneous identical outbound DNS queries, which makes it easier for remote attackers to spoof DNS responses, as demonstrated by a spoofed A record in the Additional section of a response to a Start of Authority (SOA) query.

Affected products

• D.j.bernstein Djbdns: version 1.05 only

Published 2009-02-19. Last modified 2026-06-16.