{"action":"Upgrade refpolicy to 2:0.0.20080702-1 or later.","affected":[{"fixed":"2:0.0.20080702-1","introduced":"0"}],"component":"refpolicy","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2:0.0.20080702-1"],"id":"tcs_01M5N90GDAPZQ09AHFD81XH7TY","modified_at":"2026-10-23T18:01:17.180382743Z","published_at":"2008-07-08T23:41:00Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2008-1447","https://security-tracker.debian.org/tracker/CVE-2008-1447"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2008-1447#Debian:12/refpolicy","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2008-1447"}],"summary":"The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementati"}