Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vh8j-jj36-28wq

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a long name that refers to itself. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1868.

The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a long name that refers to itself. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1868.

EPSS

Процентиль: 96%
0.11284
Средний

Связанные уязвимости

ubuntu
около 11 лет назад

The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a long name that refers to itself. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1868.

nvd
около 11 лет назад

The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a long name that refers to itself. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1868.

debian
около 11 лет назад

The label decompression functionality in PowerDNS Recursor before 3.6. ...

CVSS3: 7.5
altlinux
больше 9 лет назад

ALT-PU-2017-1425: package `pdns` update to version 4.0.3-alt2

EPSS

Процентиль: 96%
0.11284
Средний