CVE-2016-10152

The readconfigfile function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoning the DNS cache...

CVE-2016-10151

The hesiodinit function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via the 1 HESIODCONFIG or 2 HESDOMAIN environment variable and leveraging certain SUID/SGUID binary...

Hesiod has multiple vulnerabilities

Hesiod is a suite of DNS-based directory storage applications. Security bypass vulnerabilities and elevation of privilege vulnerabilities exist in Hesiod. An attacker could use these vulnerabilities to bypass security restrictions and gain unauthorized access or elevate privileges...