CVE-2006-4251: Buffer Overflow
Published Nov 14, 2006
·Updated
Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length.
Affected Software
12 affected components
powerdns recursor<=3.1.3
powerdns recursor=2.0_rc1
powerdns recursor=2.8
powerdns recursor=2.9.15
powerdns recursor=2.9.16
powerdns recursor=2.9.17
powerdns recursor=2.9.18
powerdns recursor=3.0
powerdns recursor=3.0.1
powerdns recursor=3.1
powerdns recursor=3.1.1
powerdns recursor=3.1.2
Remediation
Patch Available
Patch Available
Patch Available
Event History
Nov 14, 2006
CVE Published
07:07 PM
Data Sourced
via NVD·07:07 PM
RemedyDescriptionSeverityAffected Software
Nov 15, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-4251?
CVE-2006-4251 has a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2006-4251?
To fix CVE-2006-4251, upgrade to PowerDNS Recursor version 3.1.4 or later.
3
What versions of PowerDNS Recursor are affected by CVE-2006-4251?
CVE-2006-4251 affects PowerDNS Recursor versions up to and including 3.1.3, as well as several earlier versions.
4
Can CVE-2006-4251 be exploited remotely?
Yes, CVE-2006-4251 can be exploited remotely via a malformed TCP DNS query.
5
What is the nature of the vulnerability in CVE-2006-4251?
The vulnerability in CVE-2006-4251 is a buffer overflow that occurs during DNS query length calculation.