Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6vw9-xcrf-334g

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can trigger a race condition leading to a crash, or possibly arbitrary code execution, by sending crafted queries with a GSS-TSIG signature.

An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can trigger a race condition leading to a crash, or possibly arbitrary code execution, by sending crafted queries with a GSS-TSIG signature.

EPSS

Процентиль: 23%
0.00075
Низкий

Связанные уязвимости

CVSS3: 8.1
ubuntu
больше 5 лет назад

An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can trigger a race condition leading to a crash, or possibly arbitrary code execution, by sending crafted queries with a GSS-TSIG signature.

CVSS3: 8.1
nvd
больше 5 лет назад

An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can trigger a race condition leading to a crash, or possibly arbitrary code execution, by sending crafted queries with a GSS-TSIG signature.

CVSS3: 8.1
debian
больше 5 лет назад

An issue was discovered in PowerDNS Authoritative through 4.3.0 when - ...

EPSS

Процентиль: 23%
0.00075
Низкий