漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Out-of-bounds read when parsing DNS packets via Lua
Vulnerability Description
An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential information disclosure.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Vulnerability Type
N/A
Vulnerability Title
PowerDNS DNSdist 安全漏洞
Vulnerability Description
PowerDNS DNSdist是PowerDNS公司的一个提供DNS流量负载均衡与安全防护能力的代理软件。 PowerDNS DNSdist存在安全漏洞,该漏洞源于使用newDNSPacketOverlay解析DNS数据包时存在越界读取,可能导致崩溃、拒绝服务或信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A