CVE-2008-3337
Fixed in a distro release EPSS 6%
PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.
Products: powerdns authoritative_server, powerdns
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pdns | 2.9.21.1-1 |
| Debian 13 | pdns | 2.9.21.1-1 |
| Debian 14 | pdns | 2.9.21.1-1 |
| Debian 4.0 | pdns | 2.9.20-8+etch1 |
| openSUSE Tumbleweed | pdns | 4.5.1-1.5 |