CVE-2018-14663

An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the addition of a record by dnsdist, for example an OPT record when adding EDNS Client Subnet, might result in the trailing data being smuggled to the backend as a...

CVE-2018-14663: Improper Input Validation

An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the addition of a record by dnsdist, for example an OPT record when adding EDNS Client Subnet, might result in the trailing data being smuggled to the backend as a...

PT-2018-12651

Name of the Vulnerable Software and Affected Versions PowerDNS DNSDist versions prior to 1.3.3 Description The issue allows a remote attacker to craft a DNS query with trailing data, potentially smuggling it to the backend as a valid record. This occurs when PowerDNS DNSDist is used as a DNS...