WID-SEC-W-2025-0059

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

PowerDNS: Mehrere Schwachstellen ermöglichen Denial of Service

view advisory published 2018-11-06

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in PowerDNS ausnutzen, um einen Denial of Service Angriff durchzuführen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2018-14626UShigh7.5—
PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerable to a packet cache pollution via crafted query that can le…
CVE-2018-10851UShigh7.5—
PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while pa…
CVE-2018-14644USmedium5.9—
An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query for a meta-type like OPT can lead to a zone being wrongly c…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan