Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-10851

Опубликовано: 29 нояб. 2018
Источник: debian

Описание

PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
pdnsfixed4.1.5-1package
pdnsfixed4.0.3-1+deb9u3stretchpackage
pdnsignoredjessiepackage
pdns-recursorfixed4.1.7-1package
pdns-recursorfixed4.0.4-1+deb9u4stretchpackage
pdns-recursorignoredjessiepackage

Примечания

  • https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-03.html

  • Patches: https://downloads.powerdns.com/patches/2018-03/

  • https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-04.html

  • Patches: https://downloads.powerdns.com/patches/2018-04/

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 7 лет назад

PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.

CVSS3: 5.3
nvd
около 7 лет назад

PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.

suse-cvrf
около 7 лет назад

Security update for pdns

CVSS3: 7.5
github
больше 3 лет назад

PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.

suse-cvrf
около 7 лет назад

Security update for pdns