← Vulnerability feed

Vulnerability record · CVE-2006-2076 · published 27 April 2006

CVE-2006-2076: Pdnsd vulnerability

PPdnsd · Pdnsd

Memory leak in Paul Rombouts pdnsd before 1.2.4 allows remote attackers to cause a denial of service (memory consumption) via a DNS query with an unsupported (1) QTYPE or (2) QCLASS, as demonstrated by the OUSPG PROTOS DNS test suite.

5.0 CVSS 2.0 Medium EPSS 4.7% · top 8.4%
5.0CVSS 2.0 base score
4.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
24References
16 Jun 2026Last modified by NVD

Description

Memory leak in Paul Rombouts pdnsd before 1.2.4 allows remote attackers to cause a denial of service (memory consumption) via a DNS query with an unsupported (1) QTYPE or (2) QCLASS, as demonstrated by the OUSPG PROTOS DNS test suite.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/19835
http://secunia.com/advisories/20055
http://securitytracker.com/id?1015989 Patch
http://www.gentoo.org/security/en/glsa/glsa-200605-10.xml
http://www.kb.cert.org/vuls/id/955777 US Government Resource
http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en Vendor Advisory
http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en Vendor Advisory
http://www.phys.uu.nl/~rombouts/pdnsd.html
http://www.securityfocus.com/bid/17694 Patch
http://www.vupen.com/english/advisories/2006/1505
http://www.vupen.com/english/advisories/2006/1528
https://exchange.xforce.ibmcloud.com/vulnerabilities/26081
http://secunia.com/advisories/19835
http://secunia.com/advisories/20055
http://securitytracker.com/id?1015989 Patch
http://www.gentoo.org/security/en/glsa/glsa-200605-10.xml
http://www.kb.cert.org/vuls/id/955777 US Government Resource
http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en Vendor Advisory
http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en Vendor Advisory
http://www.phys.uu.nl/~rombouts/pdnsd.html
http://www.securityfocus.com/bid/17694 Patch
http://www.vupen.com/english/advisories/2006/1505
http://www.vupen.com/english/advisories/2006/1528
https://exchange.xforce.ibmcloud.com/vulnerabilities/26081

Track CVE-2006-2076 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2006-2077Pdnsd vulnerabilityBuffer overflow in Paul Rombouts pdnsd before 1.2.4 has unknown impact and attack vectors. NOTE: this issue might be related to the OUSPG PROTOS DNS …EPSS 3.2%5.0CVE-2008-4194Pdnsd vulnerabilityThe p_exec_query function in src/dns_query.c in pdnsd before 1.2.7-par allows remote attackers to cause a denial of service (daemon crash) via a long…EPSS 6.9%

Source: NIST National Vulnerability Database (record CVE-2006-2076), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.