CVE-2018-14626

PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerable to a packet cache pollution via crafted query that can lead to denial of service.

Score

CVSS 3.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2018-11-29

Last modified

2024-08-05

Weaknesses

CWE-400

Affected products

• Authoritative (Powerdns)
• Recursor (Powerdns)
• Pdns (The Powerdns Project)
• Pdns-recursor (The Powerdns Project)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14626
• https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-05.html
• https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-06.html