Debian Security Advisory 1831-1 – Matthew Dempsky discovered that Daniel J. Bernstein’s djbdns, a Domain Name System server, does not constrain offsets in the required manner, which allows remote attackers with control over a third-party subdomain served by tinydns and axfrdns, to trigger DNS responses containing arbitrary records via crafted zone data for this subdomain.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/79166/dsa-1831-1.txt
Source: https://packetstormsecurity.com/files/79166/Debian-Linux-Security-Advisory-1831-1.html