5
CVSSv2

CVE-2021-36754

Published: 30/07/2021 Updated: 07/08/2021
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

PowerDNS Authoritative Server 4.5.0 prior to 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exception.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

powerdns authoritative server

Vendor Advisories

PowerDNS Authoritative Server 450 will crash with an uncaught out of bounds exception if it receives a query with QTYPE 65535 The offending code was not present in earlier versions, and they are not affected Users that cannot upgrade immediately, but do have dnsdist in place, can use dnsdist to filter such queries before they do harm, with som ...