CVE-2018-16855
Fixed in a distro release EPSS 59%CVSS 7.5
An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash.
Products: powerdns recursor
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | powerdns-recursor | 4.1.8-1 |
| Debian 12 | pdns-recursor | 4.1.8-1 |
| Debian 13 | pdns-recursor | 4.1.8-1 |
| Debian 14 | pdns-recursor | 4.1.8-1 |
| SUSE Package Hub 12 SP1 | pdns-recursor | 4.1.8-13.1 |
| SUSE Package Hub 15 | pdns-recursor | 4.1.2-bp150.2.3.1 |
| Ubuntu Pro 18.04 LTS | pdns-recursor | no fix |
| openSUSE Tumbleweed | pdns-recursor | 4.5.5-1.3 |