CVE-2005-0038: Medium severity PowerDNS DNSDist vulnerability
Published Dec 31, 2005
·Updated
The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.
Affected Software
18 affected components
PowerDNS DNSDist<=2.9.16
PowerDNS DNSDist=2.0_rc1
PowerDNS DNSDist=2.8
PowerDNS DNSDist=2.9.0
PowerDNS DNSDist=2.9.1
PowerDNS DNSDist=2.9.2
PowerDNS DNSDist=2.9.3a
PowerDNS DNSDist=2.9.4
PowerDNS DNSDist=2.9.5
PowerDNS DNSDist=2.9.6
PowerDNS DNSDist=2.9.7
PowerDNS DNSDist=2.9.8
PowerDNS DNSDist=2.9.10
PowerDNS DNSDist=2.9.11
PowerDNS DNSDist=2.9.12
PowerDNS DNSDist=2.9.13
PowerDNS DNSDist=2.9.14
PowerDNS DNSDist=2.9.15
Event History
Dec 31, 2005
CVE Published
05:00 AM
Apr 28, 2006
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0038?
CVE-2005-0038 has been rated as a high severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2005-0038?
To fix CVE-2005-0038, upgrade PowerDNS to version 2.9.17 or later immediately.
3
Which versions of PowerDNS are affected by CVE-2005-0038?
PowerDNS versions 2.9.16 and earlier are affected by CVE-2005-0038.
4
What type of attack does CVE-2005-0038 exploit?
CVE-2005-0038 exploits a vulnerability in the DNS implementation that allows for denial of service via compressed DNS packets.
5
Can CVE-2005-0038 trigger an infinite loop in PowerDNS?
Yes, CVE-2005-0038 can trigger an infinite loop in the affected versions of PowerDNS, leading to a denial of service.