CVE-2018-14626 MEDIUM

CVE-2018-14626

Vendor The Powerdns Project
Product pdns
Weakness CWE-400
Published November 29, 2018
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerable to a packet cache pollution via crafted query that can lead to denial of service.

Key dates

02Disclosure timeline

November 29, 2018 CVE published
August 5, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-35270 Windows iSCSI Service Denial of Service Vulnerability CVE-2023-28644 Reference fetch can saturate the server bandwidth for 10 seconds in nextcloud server CVE-2023-39327 Openjpeg: malicious files can cause the program to enter a large loop CVE-2024-35194 Stacklok Minder vulnerable to denial of service from maliciously crafted templates CVE-2018-5391 The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets