CVE Vulnerabilities

CVE-2005-0038

Published: Dec 31, 2005 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.

Affected Software

NameVendorStart VersionEnd Version
PowerdnsPowerdns*2.9.16 (including)
PowerdnsPowerdns2.0_rc1 (including)2.0_rc1 (including)
PowerdnsPowerdns2.8 (including)2.8 (including)
PowerdnsPowerdns2.9.0 (including)2.9.0 (including)
PowerdnsPowerdns2.9.1 (including)2.9.1 (including)
PowerdnsPowerdns2.9.2 (including)2.9.2 (including)
PowerdnsPowerdns2.9.3a (including)2.9.3a (including)
PowerdnsPowerdns2.9.4 (including)2.9.4 (including)
PowerdnsPowerdns2.9.5 (including)2.9.5 (including)
PowerdnsPowerdns2.9.6 (including)2.9.6 (including)
PowerdnsPowerdns2.9.7 (including)2.9.7 (including)
PowerdnsPowerdns2.9.8 (including)2.9.8 (including)
PowerdnsPowerdns2.9.10 (including)2.9.10 (including)
PowerdnsPowerdns2.9.11 (including)2.9.11 (including)
PowerdnsPowerdns2.9.12 (including)2.9.12 (including)
PowerdnsPowerdns2.9.13 (including)2.9.13 (including)
PowerdnsPowerdns2.9.14 (including)2.9.14 (including)
PowerdnsPowerdns2.9.15 (including)2.9.15 (including)
PdnsUbuntuupstream*

References