Lucene search

[email protected]NVD:CVE-2024-25583

HistoryApr 25, 2024 - 10:15 a.m.

CVE-2024-25583

2024-04-2510:15:08

CWE-20

[email protected]

web.nvd.nist.gov

crafted response

upstream server

denial of service

recursor

default configuration

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.0%

JSON

A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.

References

www.openwall.com/lists/oss-security/2024/04/24/1

doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-02.html

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

9.0%

JSON

Related for NVD:CVE-2024-25583

debiancve1 nessus3 cve1 veracode1 cvelist1 openvas3 alpinelinux1 debian1 osv3 vulnrichment1 freebsd1 ubuntucve1