Powerdns Vulnerabilidad

Cronología

Escribe

Producto

PowerDNS Recursor20
PowerDNS Authoritative Server15
PowerDNS PowerDNS Recursor4
PowerDNS Authoritative2
PowerDNS Authenticate1

Contramedidas

Official Fix34
Temporary Fix0
Workaround0
Unavailable0
Not Defined5

Explotabilidad

High0
Functional0
Proof-of-Concept4
Unproven0
Not Defined35

Vector de acceso

Not Defined0
Physical0
Local3
Adjacent2
Network34

Autenticación

Not Defined0
High0
Low11
None28

La interacción del usuario

Not Defined0
Required2
None37

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤44
≤52
≤616
≤79
≤87
≤90
≤101

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤54
≤615
≤712
≤83
≤90
≤101

VulDB

≤10
≤20
≤30
≤46
≤55
≤612
≤77
≤88
≤90
≤101

NVD

≤10
≤20
≤30
≤40
≤52
≤66
≤73
≤89
≤93
≤102

CNA

≤10
≤20
≤30
≤44
≤50
≤66
≤71
≤81
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k8
<2k22
<5k9
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k39
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (6): Authenticate (1), Authoritative (2), Authoritative Server (15), PowerDNS Recursor (4), Recursor (20), dnsdist (1)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2023-04-043.93.9PowerDNS Recursor denegación de servicioDomain Name SoftwareNot DefinedNot Defined0.001240.04CVE-2023-26437
2023-01-225.95.8PowerDNS Recursor DS Record denegación de servicioDomain Name SoftwareNot DefinedOfficial Fix0.003240.00CVE-2023-22617
2022-03-255.55.3PowerDNS Authoritative Server/PowerDNS Recursor Zone Transfer Privilege EscalationDomain Name SoftwareNot DefinedOfficial Fix0.002600.00CVE-2022-27227
2021-07-313.53.4PowerDNS Authoritative Server Query divulgación de informaciónDomain Name SoftwareNot DefinedOfficial Fix0.025650.00CVE-2021-36754
2020-10-165.95.6PowerDNS Recursor Cached Record denegación de servicioDomain Name SoftwareNot DefinedOfficial Fix0.003640.00CVE-2020-25829
2020-10-027.87.8PowerDNS Authenticate GSS-TSIG Signature desbordamiento de búferDomain Name SoftwareNot DefinedNot Defined0.004310.00CVE-2020-24698
2020-10-025.75.7PowerDNS Authoritative GSS-TSIG Signature denegación de servicioDomain Name SoftwareNot DefinedNot Defined0.002130.00CVE-2020-24697
2020-10-026.76.7PowerDNS Authoritative GSS-TSIG Signature denegación de servicioDomain Name SoftwareNot DefinedNot Defined0.002940.00CVE-2020-24696
2020-10-023.83.6PowerDNS Authoritative Server Record divulgación de informaciónDomain Name SoftwareNot DefinedOfficial Fix0.000670.00CVE-2020-17482
2019-07-304.04.0PowerDNS Authoritative Server NOTIFY Message denegación de servicioDomain Name SoftwareNot DefinedOfficial Fix0.001010.00CVE-2019-10163

29 no se muestran más entradas

Do you know our Splunk app?

Download it now for free!