Skip to content
Sign in
7.0 High

CVE-2018-1046 pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay

Description

pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool provided with PowerDNS Authoritative, replaying a specially crafted PCAP file can trigger a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution. This buffer overflow only occurs when the -ecs-stamp option of dnsreplay is used.

Affected products and versions

Product Affected versions Fixed in
pdns Versions not published

Other CVEs of pdns

The 3 CVEs of pdns →
CVE-2018-14644 An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4 5.3 Medium CVE-2016-2120 An issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0.1 allowing an… 7.5 High
Track this CVE