PT-2018-9885 · Powerdns+4 · Powerdns Authoritative+5

Adam Mariš · Published 2018-05-23 · Updated 2025-01-14 · CVE-2018-1046

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: PowerDNS Authoritative versions prior to 4.1.2

Description: The issue is related to a buffer overflow in the dnsreplay tool. When the -ecs-stamp option of dnsreplay is used to replay a specially crafted PCAP file, it can trigger a stack-based buffer overflow. This leads to a crash and potentially allows for arbitrary code execution.

Recommendations: For versions prior to 4.1.2, update to version 4.1.2 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the -ecs-stamp option in dnsreplay until the update is applied.

Fix

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

ALT-PU-2020-1325

ALT-PU-2020-1407

CVE-2018-1046

MGASA-2018-0255

OPENSUSE-SU-2018:1462-1

OPENSUSE-SU-2018_1384-1

OPENSUSE-SU-2018_1442-1

OPENSUSE-SU-2024:11156-1

SUSE-SU-2018:1660-1

USN-7203-1

Affected Products

Alt Linux

Linuxmint

Powerdns Authoritative

Powerdns Authoritative Server

Suse

Ubuntu

References · 64

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1046 · Security Note
• https://ubuntu.com/security/CVE-2022-27227 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14644 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10851 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10163 · Security Note
• https://errata.altlinux.org/ALT-PU-2020-1325 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-17482 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0255 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3871 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-1046 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11156-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14644 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1046 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14626 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27227 · Security Note