Описание
A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a denial of service.
Уязвимые конфигурации
Конфигурация 1Версия от 1.9.0 (включая) до 1.9.13 (исключая)Версия от 2.0.0 (включая) до 2.0.4 (исключая)
Одно из
cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
EPSS
Процентиль: 51%
0.00731
Низкий
6.5 Medium
CVSS3
8.2 High
CVSS3
Дефекты
CWE-122
Связанные уязвимости
CVSS3: 6.5
ubuntu
4 месяца назад
A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a denial of service.
CVSS3: 6.5
debian
4 месяца назад
A rogue backend can send a crafted UDP response with a query ID off by ...
CVSS3: 6.5
github
4 месяца назад
A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a denial of service.
EPSS
Процентиль: 51%
0.00731
Низкий
6.5 Medium
CVSS3
8.2 High
CVSS3
Дефекты
CWE-122