CVE-2015-1868

Опубликовано: 18 мая 2015

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156648.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156655.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156667.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156680.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156725.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156743.html
Third Party Advisory
http://www.debian.org/security/2015/dsa-3306
http://www.debian.org/security/2015/dsa-3307
http://www.securityfocus.com/bid/74306
Third Party Advisory
http://www.securitytracker.com/id/1032220
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156648.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156655.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156667.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156680.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156725.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156743.html
Third Party Advisory
http://www.debian.org/security/2015/dsa-3306
http://www.debian.org/security/2015/dsa-3307
http://www.securityfocus.com/bid/74306
Third Party Advisory
http://www.securitytracker.com/id/1032220
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:powerdns:authoritative:3.2:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:authoritative:3.3:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:authoritative:3.3.1:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:authoritative:3.3.2:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:authoritative:3.4.0:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:authoritative:3.4.1:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:authoritative:3.4.3:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:20:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:21:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:powerdns:recursor:3.5:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:recursor:3.5.1:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:recursor:3.5.2:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:recursor:3.5.3:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:recursor:3.6.0:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:recursor:3.6.1:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:recursor:3.6.2:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:recursor:3.6.3:*:*:*:*:*:*:*

cpe:2.3:a:powerdns:recursor:3.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 57%

0.00351

Низкий

7.8 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

CVE-2015-1868

ubuntu

больше 10 лет назад

CVE-2015-1868

debian

больше 10 лет назад

The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6. ...

GHSA-9r88-88v4-3j6c

github

больше 3 лет назад

EPSS

Процентиль: 57%

0.00351

Низкий

7.8 High

CVSS2

Дефекты

CWE-399