CVE-2018-16855

An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash.

Score

CVSS 3.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2018-12-03

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Recursor (Powerdns)
• Pdns-recursor (Unknown)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16855
• https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-09.html