PT-2018-4978 · Powerdns+1 · Powerdns Authoritative Server+1

Mongo · Publicado 2017-01-13 · Atualizado 2024-06-15 · CVE-2016-7072

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions PowerDNS Authoritative Server versions prior to 3.4.11 PowerDNS Authoritative Server versions prior to 4.0.2

Description A remote, unauthenticated attacker can cause a denial of service by opening a large number of TCP connections to the web server, potentially triggering an exception and terminating the PowerDNS process if the web server runs out of file descriptors.

Recommendations For PowerDNS Authoritative Server versions prior to 3.4.11, update to version 3.4.11 or later. For PowerDNS Authoritative Server versions prior to 4.0.2, update to version 4.0.2 or later.

Correção

DoS

RCE

Resource Exhaustion

Enumeração de Fraquezas

CWE-20

CWE-400

Identificadores relacionados

ALT-PU-2017-1425

CVE-2016-7072

DLA-798-1

DSA-3764-1

MGASA-2017-0033

OPENSUSE-SU-2024:11156-1

Produtos afetados

Alt Linux

Powerdns Authoritative Server

Referências · 47

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5426 · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-1046 · Nota
• https://errata.altlinux.org/ALT-PU-2017-1425 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/pdns · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-2120 · Nota
• https://suse.com/security/cve/CVE-2019-3871 · Nota
• https://suse.com/security/cve/CVE-2018-10851 · Nota
• https://suse.com/security/cve/CVE-2017-15091 · Nota
• https://doc.powerdns.com/md/security/powerdns-advisory-2016-04 · Nota
• https://doc.powerdns.com/md/security/powerdns-advisory-2016-03 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2017-0033 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2016-7072 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-7072 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-7072 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:11156-1 · Aviso do Fabricante