Vulnerability Details CVE-2005-0038
The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.4%
CVSS Severity
CVSS v2 Score 5.0
References
- http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html
- http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en
- http://www.osvdb.org/25291
- http://www.securityfocus.com/bid/13729
- http://www.niscc.gov.uk/niscc/docs/al-20050524-00433.html
- http://www.niscc.gov.uk/niscc/docs/re-20050524-00432.pdf?lang=en
- http://www.osvdb.org/25291
- http://www.securityfocus.com/bid/13729
Products affected by CVE-2005-0038
-
cpe:2.3:a:powerdns:powerdns:*
-
cpe:2.3:a:powerdns:powerdns:2.0_rc1
-
cpe:2.3:a:powerdns:powerdns:2.8
-
cpe:2.3:a:powerdns:powerdns:2.9.0
-
cpe:2.3:a:powerdns:powerdns:2.9.1
-
cpe:2.3:a:powerdns:powerdns:2.9.10
-
cpe:2.3:a:powerdns:powerdns:2.9.11
-
cpe:2.3:a:powerdns:powerdns:2.9.12
-
cpe:2.3:a:powerdns:powerdns:2.9.13
-
cpe:2.3:a:powerdns:powerdns:2.9.14
-
cpe:2.3:a:powerdns:powerdns:2.9.15
-
cpe:2.3:a:powerdns:powerdns:2.9.2
-
cpe:2.3:a:powerdns:powerdns:2.9.3a
-
cpe:2.3:a:powerdns:powerdns:2.9.4
-
cpe:2.3:a:powerdns:powerdns:2.9.5
-
cpe:2.3:a:powerdns:powerdns:2.9.6
-
cpe:2.3:a:powerdns:powerdns:2.9.7
-
cpe:2.3:a:powerdns:powerdns:2.9.8