Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a zero TTL, which triggers an infinite loop.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PowerDNS远程拒绝服务及缓冲区溢出漏洞
Vulnerability Description
PowerDNS是一款高效的名称服务器。 PowerDNS在处理查询报文时存在多个漏洞，远程攻击者可能利用漏洞对服务器执行拒绝服务或缓冲区溢出攻击。 PowerDNS Recursor在处理TCP DNS查询时没有正确地计算长度，试图将最多4G的查询读入到65535字节的缓冲区。攻击者可以通过发送超长报文触发溢出，导致执行任意代码。此外，PowerDNS Recursor在处理畸形的CNAME记录时还可能会无限的递归，导致耗尽所有分配的栈空间。
CVSS Information
N/A
Vulnerability Type
N/A