CVE-2018-1046 in pdnsinfo

Summary

pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool provided with PowerDNS Authoritative, replaying a specially crafted PCAP file can trigger a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution. This buffer overflow only occurs when the -ecs-stamp option of dnsreplay is used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsible

Red Hat, Inc.

Reservation

12/04/2017

Disclosure

07/16/2018

CPE

ready

CVSS

6.4

EPSS

0.00002

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!