Description
Multiple unspecified vulnerabilities in DeleGate 9.x before 9.0.6 and 8.x before 8.11.6 allow remote attackers to cause a denial of service via crafted DNS responses messages that cause (1) a buffer over-read or (2) infinite recursion, which can trigger a segmentation fault or invalid memory access, as demonstrated by the OUSPG PROTOS DNS test suite.
References
- dns-improper-request-handling(26081) vdb-entry
- VU#955777 third-party-advisory
- 1015991 vdb-entry
- 19750 third-party-advisory
- ADV-2006-1505 vdb-entry
- ADV-2006-1506 vdb-entry
- 17691 vdb-entry
- http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en
- http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en