Description
Posadis 0.50.4 through 0.50.8 allows remote attackers to cause a denial of service (crash) via a DNS message without a question section, which triggers null dereference.
References
- posadis-dns-packet-dos(11285) vdb-entry
- 8018 third-party-advisory
- 6799 vdb-entry
- 3522 vdb-entry
- http://www.posadis.org/advisories/pos_adv_003.txt