cbcvebase.
CVE-2005-0038
published 2005-12-31

CVE-2005-0038: The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte…

medium5CVSS 3.1
AVNACLAuNCNINAP
The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.

Affected

23 ranges
VendorProductVersion rangeFixed in
debianpdns< pdns 2.9.17-1 (bookworm)pdns 2.9.17-1 (bookworm)
open-xchangepdns>= 0 < 2.9.17-12.9.17-1
open-xchangepdns>= 0 < 2.9.17-12.9.17-1
open-xchangepdns>= 0 < 2.9.17-12.9.17-1
open-xchangepdns>= 0 < 2.9.17-12.9.17-1
powerdnspowerdns<= 2.9.16
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns
powerdnspowerdns

CVSS provenance

nvd5.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM