Afldl

**Name of the Vulnerable Software and Affected Versions** NSD (affected versions not specified) **Description** A remote client can cause a crash of the NSD serve child process in debugging or non-release build types. This occurs when the process receives a specially crafted message containing a specific number of DNS Cookie options, such as 17 options when the UDP payload size is 512. Repeatedly crashing these processes can severely degrade performance or lead to a complete denial of DNS service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GNU SASL versions prior to 2.2.4 **Description** The NTLM client lacks sanitization of a short challenge within the ` gsasl ntlm client step()` function. This flaw allows a crafted server to cause memory disclosure. **Recommendations** Update to version 2.2.4 or later.