CVE-2018-16855

N/A

Description

An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash.

CVE Details

CVSS v3.1 ScoreN/A

Published12/3/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

powerdns:recursor

Weaknesses (CWE)

CWE-125CWE-125

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16855(secalert@redhat.com)

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-09.html(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16855(af854a3a-2127-422b-91ae-364da2661108)

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-09.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.