Lucene search
K

27 matches found

RedhatCVE
RedhatCVE
added 2025/12/17 8:8 a.m.1 views

CVE-2025-59029

A flaw was found in PowerDNS. This vulnerability allows an attacker to trigger an assertion failure via requesting crafted DNS Domain Name System records, waiting for them to be inserted into the records cache, then sending a query with qtype set to ANY. Mitigation To mitigate this issue, restric...

5.3CVSS6.3AI score0.00009EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/12/12 12:25 a.m.2 views

SUSE CVE-2025-59029

An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY...

5.3CVSS6.9AI score0.00009EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/09 6:30 p.m.2 views

EUVD-2025-201911

An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY...

5.3CVSS6.3AI score0.00009EPSS
Exploits0References2
NVD
NVD
added 2025/12/09 4:17 p.m.2 views

CVE-2025-59029

An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY...

5.3CVSS0.00009EPSS
Exploits0References1
OSV
OSV
added 2025/12/09 4:17 p.m.1 views

CVE-2025-59029

An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY...

5.3CVSS5.5AI score
Exploits0References1
OSV
OSV
added 2025/12/09 4:17 p.m.0 views

UBUNTU-CVE-2025-59029

An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY...

5.3CVSS5.8AI score0.00009EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/09 9:16 a.m.2 views

CVE-2025-59029 Internal logic flaw in cache management can lead to a denial of service in PowerDNS Recursor

An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY...

5.3CVSS6.4AI score0.00009EPSS
Exploits0References1
CVE
CVE
added 2025/12/09 9:16 a.m.6 views

CVE-2025-59029

PowerDNS Recursor exposes CVE-2025-59029: an attacker can trigger an assertion failure by sending crafted DNS records and then querying with qtype=ANY after records are cached. The issue affects the PowerDNS Recursor family per multiple CNVD/NVD/CVE records; the NVD metrics indicate NETWORK attac...

5.3CVSS6.2AI score0.00009EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/08/09 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2020-25829

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. A remote attacker can cause the cached records for a giv...

7.5CVSS7AI score0.00248EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:53 a.m.1 views

SUSE CVE-2020-25829

An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. A remote attacker can cause the cached records for a given name to be updated to the Bogus DNSSEC validation state, instead of their actual DNSSEC Secure state, via a DNS ANY query. This result...

7.5CVSS8.2AI score0.00248EPSS
Exploits0References4
OSV
OSV
added 2020/10/24 5:51 p.m.4 views

MGASA-2020-0393 Updated pdns-recursor package fixes a security vulnerability

An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. A remote attacker can cause the cached records for a given name to be updated to the Bogus DNSSEC validation state, instead of their actual DNSSEC Secure state, via a DNS ANY query. This result...

7.5CVSS7.3AI score0.00248EPSS
Exploits0References4
OSV
OSV
added 2020/10/16 6:15 a.m.2 views

DEBIAN-CVE-2020-25829

An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. A remote attacker can cause the cached records for a given name to be updated to the Bogus DNSSEC validation state, instead of their actual DNSSEC Secure state, via a DNS ANY query. This result...

7.5CVSS7.9AI score0.00248EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2020/10/16 6:15 a.m.16 views

CVE-2020-25829

An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. A remote attacker can cause the cached records for a given name to be updated to the Bogus DNSSEC validation state, instead of their actual DNSSEC Secure state, via a DNS ANY query. This result...

7.5CVSS7AI score0.00248EPSS
Exploits0References2
OSV
OSV
added 2020/10/16 6:15 a.m.0 views

UBUNTU-CVE-2020-25829

An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. A remote attacker can cause the cached records for a given name to be updated to the Bogus DNSSEC validation state, instead of their actual DNSSEC Secure state, via a DNS ANY query. This result...

7.5CVSS7.2AI score0.00248EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2020/10/16 12:0 a.m.3 views

PT-2020-16230 · Powerdns +1 · Powerdns Recursor +1

Name of the Vulnerable Software and Affected Versions: PowerDNS Recursor versions 4.1.x through 4.1.17 PowerDNS Recursor versions 4.2.x through 4.2.4 PowerDNS Recursor versions 4.3.x through 4.3.4 Description: A remote attacker can cause the cached records for a given name to be updated to the...

9.8CVSS6.2AI score0.70787EPSS
Exploits0References46
RedHat Linux
RedHat Linux
added 2020/04/28 4:8 p.m.2 views

php: memcpy with negative length via crafted DNS response

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dnsgetrecord misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects phpparser...

7.5CVSS7.5AI score0.08561EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2019/11/01 1:3 p.m.1 views

php: memcpy with negative length via crafted DNS response

An issue was discovered in PHP 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.2. dnsgetrecord misparses a DNS response, which can allow a hostile DNS server to cause PHP to misuse memcpy, leading to read operations going past the buffer allocated for DNS data. This affects phpparser...

7.5CVSS7.5AI score0.08561EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2017/06/28 9:0 a.m.2 views

bind: assertion failure while processing response to an ANY query

A denial of service flaw was found in the way BIND processed a response to an ANY query. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

7.5CVSS7.2AI score0.6803EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2017/01/16 5:51 a.m.1 views

bind: assertion failure while processing response to an ANY query

A denial of service flaw was found in the way BIND processed a response to an ANY query. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted DNS response...

7.5CVSS7.2AI score0.6803EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2017/01/13 12:0 a.m.31 views

F5 Networks BIG-IP : BIND vulnerability (K86272821)

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service assertion failure and daemon exit via a malformed response to an RTYPE ANY query.CVE-2016-9131 Impact When the BIND recursion option is enabled, an...

7.5CVSS7.4AI score0.6803EPSS
Exploits0References2
Rows per page
Query Builder