CVE-2020-24696

2020-10-0208:21:46

mitre

www.cve.org

8.3 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.7%

JSON

An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can trigger a race condition leading to a crash, or possibly arbitrary code execution, by sending crafted queries with a GSS-TSIG signature.