CVE-2005-0428: Medium severity PowerDNS DNSDist vulnerability
Published Feb 15, 2005
·Updated
The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a random stream of bytes.
Affected Software
3 affected components
PowerDNS DNSDist=2.0_rc1
PowerDNS DNSDist=2.8
PowerDNS DNSDist=2.9.15
Remediation
Patch Available
Patch Available
Event History
Feb 15, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0428?
CVE-2005-0428 is classified as a denial of service vulnerability that can impact system availability.
2
How do I fix CVE-2005-0428?
To mitigate CVE-2005-0428, upgrade PowerDNS to version 2.9.17 or later.
3
Which versions of PowerDNS are affected by CVE-2005-0428?
CVE-2005-0428 affects PowerDNS versions 2.0_rc1, 2.8, and 2.9.15.
4
Can CVE-2005-0428 be exploited remotely?
Yes, CVE-2005-0428 can be exploited remotely by sending a random stream of bytes to the affected service.
5
What component of PowerDNS is vulnerable in CVE-2005-0428?
The vulnerability in CVE-2005-0428 exists in the DNSPacket::expand method of dnspacket.cc.