PT-2018-13774 · Powerdns+1 · Powerdns Recursor+1

Andrej Nemec · Publicado 2018-12-03 · Atualizado 2024-06-15 · CVE-2018-16855

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions PowerDNS Recursor versions prior to 4.1.8

Description A remote attacker can trigger an out-of-bounds memory read by sending a DNS query, which can cause a crash while the software computes the hash of the query for a packet cache lookup.

Recommendations For versions prior to 4.1.8, update to version 4.1.8 or later to resolve the issue.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2018-16855

MGASA-2019-0009

OPENSUSE-SU-2018:4062-1

OPENSUSE-SU-2018:4177-1

OPENSUSE-SU-2018_4152-1

OPENSUSE-SU-2024:11157-1

Produtos afetados

Powerdns Recursor

Suse

Referências · 50

• https://nvd.nist.gov/vuln/detail/CVE-2018-16855 · Nota de Segurança
• https://bugzilla.suse.com/1114157 · Nota
• https://suse.com/security/cve/CVE-2018-16855.html · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-16855 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:11157-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-2120 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/M2UYXXO7I4TUSSSVHBOZEQKRR4SWMVXY/#M2UYXXO7I4TUSSSVHBOZEQKRR4SWMVXY · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2018:4062-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-10851 · Nota
• https://suse.com/security/cve/CVE-2018-16855 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=23815 · Nota
• https://suse.com/security/cve/CVE-2020-10995 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/DOLOBIPIZ3LAIYOJATK4335ZBTPVTRC2 · Nota
• https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-09.html · Aviso do Fabricante
• https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-07.html · Nota