CVE-2006-4251

Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length...

DEBIAN-CVE-2006-4251

Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length...

CVE-2006-4251

PowerDNS Recursor 3.1.3 and earlier are affected by CVE-2006-4251 due to a buffer overflow in handling TCP DNS queries, potentially allowing remote code execution. Mitigation observed in connected docs: upgrade to pdns-recursor 3.1.4 or later (e.g., Debian/DSA-1211-1 and SUSE/SUSES-SA:2006:070 de...

CVE-2006-4251

Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length...

CVE-2006-4251

Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length...

PowerDNS远程拒绝服务及缓冲区溢出漏洞

PowerDNS是一款高效的名称服务器。 PowerDNS在处理查询报文时存在多个漏洞，远程攻击者可能利用漏洞对服务器执行拒绝服务或缓冲区溢出攻击。 PowerDNS Recursor在处理TCP DNS查询时没有正确地计算长度，试图将最多4G的查询读入到65535字节的缓冲区。攻击者可以通过发送超长报文触发溢出，导致执行任意代码。 此外，PowerDNS Recursor在处理畸形的CNAME记录时还可能会无限的递归，导致耗尽所有分配的栈空间。 PowerDNS Recursor = 3.1.3 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁...

DSA-1211 pdns

Bulletin has no description...

[SA22824] PowerDNS Recursor Two Vulnerabilities

TITLE: PowerDNS Recursor Two Vulnerabilities SECUNIA ADVISORY ID: SA22824 VERIFY ADVISORY: http://secunia.com/advisories/22824/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: PowerDNS Recursor 3.x http://secunia.com/product/9556/ PowerDNS 2.x...

Multiple PowerDNS vulnerabilities

Buffer overflow and DoS...

CVE-2005-0038

Summary (CVE-2005-0038): The DNS implementation in PowerDNS 2.9.16 and earlier is vulnerable to remote denial of service via a compressed DNS packet with a label length byte offset error that can trigger an infinite loop. This is corroborated by multiple sources in the connected documents (NVD, S...

CVE-2005-0038

The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop...

CVE-2005-0038

The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop...

Code injection

The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service application crash via malformed EDNS0 packets...

CVE-2006-2069

The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service application crash via malformed EDNS0 packets...

CVE-2006-2069

The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service application crash via malformed EDNS0 packets...

DEBIAN-CVE-2006-2069

The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service application crash via malformed EDNS0 packets...

CVE-2006-2069

CVE-2006-2069 affects the PowerDNS Recursor. The vulnerability stems from the recursor’s handling of EDNS0 packets, where malformed EDNS0 data can cause an application crash, yielding a remote denial-of-service condition. Affected software/version: PowerDNS Recursor prior to 3.0.1 (PowerDNS 3.x h...

CVE-2006-2069

The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service application crash via malformed EDNS0 packets...

CVE-2006-2069

The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service application crash via malformed EDNS0 packets...

CVE-2005-0038

The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop...