CVE-2008-3337
CVE-2008-3337
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.
EPSS 6,1% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
pdns Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 2.9.21.1-1
Mettez à jour vers 2.9.21.1-1
pdns Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 2.9.21.1-1
Mettez à jour vers 2.9.21.1-1
pdns Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 2.9.21.1-1
Mettez à jour vers 2.9.21.1-1
Sources originales
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
- https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00109.html
- http://secunia.com/advisories/31401
- http://www.securityfocus.com/bid/30587
- http://secunia.com/advisories/31687
- http://doc.powerdns.com/changelog.html
- http://secunia.com/advisories/31448
- https://www.debian.org/security/2008/dsa-1628
- http://doc.powerdns.com/powerdns-advisory-2008-02.html
- http://secunia.com/advisories/33264
- https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00140.html
- http://mailman.powerdns.com/pipermail/pdns-users/2008-August/005646.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44253
- http://security.gentoo.org/glsa/glsa-200812-19.xml
- http://secunia.com/advisories/31407
- http://www.vupen.com/english/advisories/2008/2320
- https://nvd.nist.gov/vuln/detail/CVE-2008-3337