PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.

CPENameOperatorVersion
authoritative_serverle2.9.21

CPE	Name	Operator	Version
	authoritative_server	le	2.9.21

References

doc.powerdns.com/changelog.html

doc.powerdns.com/powerdns-advisory-2008-02.html

lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

mailman.powerdns.com/pipermail/pdns-users/2008-August/005646.html

secunia.com/advisories/31401

secunia.com/advisories/31407

secunia.com/advisories/31448

secunia.com/advisories/31687

secunia.com/advisories/33264

security.gentoo.org/glsa/glsa-200812-19.xml

www.securityfocus.com/bid/30587

www.vupen.com/english/advisories/2008/2320

exchange.xforce.ibmcloud.com/vulnerabilities/44253

www.debian.org/security/2008/dsa-1628

www.redhat.com/archives/fedora-package-announce/2008-August/msg00109.html

www.redhat.com/archives/fedora-package-announce/2008-August/msg00140.html

debiancve 3

ubuntucve 3

cve 3

redhatcve 1

fedora 5

debian 11

nessus 40

openvas 75

osv 5

redhat 2

oraclelinux 2

exploitpack 3

prion 3

securityvulns 8

freebsd 2

altlinux 5

seebug 5

f5 2

checkpoint_advisories 2

packetstorm 3

suse 1

gentoo 4

checkpoint_security 1

centos 2

ubuntu 2

slackware 3

freebsd_advisory 1

rubygems 1

mskb 1

debiancve

CVE-2008-3337

2008-08-08 19:41:00

CVE-2008-1447

2008-07-08 23:41:00

CVE-2008-3217

2008-07-18 16:41:00

ubuntucve

CVE-2008-3337

2008-08-08 00:00:00

CVE-2008-1447

2008-07-08 00:00:00

CVE-2008-3217

2008-07-18 00:00:00

cve

CVE-2008-3337

2008-08-08 19:41:00

CVE-2008-1447

2008-07-08 23:41:00

CVE-2008-3217

2008-07-18 16:41:00

redhatcve

CVE-2008-3337

2019-10-04 20:21:18

fedora

[SECURITY] Fedora 8 Update: pdns-2.9.21.1-1.fc8

2008-08-07 23:55:49

[SECURITY] Fedora 9 Update: pdns-recursor-3.1.7-2.fc9

2008-07-30 20:11:54

[SECURITY] Fedora 9 Update: pdns-2.9.21.1-1.fc9

2008-08-07 23:53:05

debian

[SECURITY] [DSA 1627-1] New PowerDNS packages reduce DNS spoofing risk

2008-08-10 20:34:06

[SECURITY] [DSA 1617-1] New refpolicy packages fix incompatible policy

2008-07-25 06:29:36

[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing

2008-07-27 09:36:54

nessus

openSUSE 10 Security Update : pdns (pdns-5510)

2008-08-14 00:00:00

PowerDNS Authoritative Server Malformed Query Cache Poisoning Weakness

2008-08-12 00:00:00

Fedora 9 : pdns-2.9.21.1-1.fc9 (2008-7048)

2008-08-08 00:00:00

openvas

Fedora Update for pdns FEDORA-2008-7083

2009-02-17 00:00:00

Fedora Update for pdns FEDORA-2008-7048

2009-02-17 00:00:00

Debian: Security Advisory (DSA-1628-1)

2023-03-08 00:00:00

osv

pdns - DNS spoofing

2008-08-10 00:00:00

bind9 - cache poisoning

2008-07-08 00:00:00

refpolicy - incompatible policy

2008-07-25 00:00:00

redhat

(RHSA-2008:0533) Important: bind security update

2008-07-08 00:00:00

(RHSA-2008:0789) Moderate: dnsmasq security update

2008-08-11 00:00:00

oraclelinux

dnsmasq security update

2008-08-11 00:00:00

bind security update

2008-07-08 00:00:00

exploitpack

BIND 9.x - Remote DNS Cache Poisoning

2008-07-25 00:00:00

BIND 9.4.1 9.4.2 - Remote DNS Cache Poisoning (Metasploit)

2008-07-23 00:00:00

BIND 9.x - Remote DNS Cache Poisoning (Python)

2008-07-24 00:00:00

prion

Spoofing

2008-07-08 23:41:00

Input validation

2008-07-18 16:41:00

Design/Logic Flaw

2008-11-18 16:00:00

securityvulns

Cisco Security Advisory: Multiple Cisco Products Vulnerable to DNS Cache Poisoning Attacks

2008-07-12 00:00:00

[SECURITY] [DSA 1605-1] DNS vulnerability impact on the libc stub resolver

2008-07-12 00:00:00

[SECURITY] [DSA 1619-1] New python-dns packages fix DNS response spoofing

2008-07-29 00:00:00

freebsd

FreeBSD -- DNS cache poisoning

2008-07-08 00:00:00

ruby -- DNS spoofing vulnerability

2008-08-08 00:00:00

altlinux

Security fix for the ALT Linux 5 package bind version 9.3.5-alt2

2008-06-06 00:00:00

Security fix for the ALT Linux 6 package bind version 9.3.5-alt2

2008-06-06 00:00:00

Security fix for the ALT Linux 8 package bind version 9.3.5-alt2

2008-06-06 00:00:00

seebug

BIND 9.4.1-9.4.2 Remote DNS Cache Poisoning Flaw Exploit (meta)

2008-07-24 00:00:00

BIND 9.x Remote DNS Cache Poisoning Flaw Exploit (c)

2008-07-26 00:00:00

BIND 9.4.1-9.4.2 Remote DNS Cache Poisoning Flaw Exploit (py)

2008-07-24 00:00:00

K8938 : BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113

2013-03-19 00:00:00

SOL8938 - BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113

2008-07-10 00:00:00

checkpoint_advisories

Microsoft Windows DNS Insufficient Socket Entropy (MS08-037; CVE-2008-1447)

2011-11-01 00:00:00

Microsoft Windows DNS Insufficient Socket Entropy (MS08-037) - High Confidence (CVE-2008-1447)

2013-05-09 00:00:00

packetstorm

bailiwicked_domain.rb.txt

2008-07-24 00:00:00

bind9x-poison.txt

2008-07-25 00:00:00

bailiwicked_host.rb.txt

2008-07-24 00:00:00

suse

DNS cache poisoning in bind

2008-07-11 09:57:52

gentoo

BIND: Cache poisoning

2008-07-11 00:00:00

PowerDNS Recursor: DNS Cache Poisoning

2008-04-18 00:00:00

PowerDNS: Multiple vulnerabilities

2008-12-19 00:00:00

checkpoint_security

Check Point response to DNS poisoning vulnerability CVE-2008-1447

2008-07-05 21:00:00

centos

bind security update

2008-07-09 01:20:56

bind, caching, selinux security update

2008-07-08 22:25:27

ubuntu

Dnsmasq vulnerability

2008-07-22 00:00:00

Bind vulnerability

2008-07-08 00:00:00

slackware

[slackware-security] dnsmasq

2008-07-24 00:02:47

[slackware-security] ruby

2008-11-29 21:37:03

[slackware-security] bind

2008-07-10 04:29:01

freebsd_advisory

FreeBSD-SA-08:06.bind

2008-07-13 00:00:00

rubygems

ruby -- DNS spoofing vulnerability in resolv.rb

2008-05-04 20:00:00

mskb

MS08-037: Vulnerabilities in DNS could allow spoofing

2018-04-17 19:03:20

Products

Security Intelligence
Non-intrusive assessment
Developers SDK
Windows scanner
Linux scanner
Perimeter control tool
MSSP

Database

Vulnerabilities
Exploits
IOC
Security News
BugBounty
Popular
Wild Exploited
Top Vulnerabilities

Tools

Linux Security Scanner
API integration
Subscriptions
Plugins
Manual Audit

Learn More

Stats
API
Docs
Api-keys
License
Pricing
Glossary
FAQ

Company

Blog
Contacts
About Us
OpenSource
EULA
Brand Guideline
Privacy Policy

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply. All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.If you are an owner of some content and want it to be removed, please contact us. Using Vulners services you are accepting Vulners services end-user license agreement

@2024 Vulners Inc

6.1 Medium

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.007 Low

EPSS

Percentile

79.3%

JSON

Related for PRION:CVE-2008-3337