CVE-2008-3337: Input Validation
Published Aug 8, 2008
·Updated
PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.
Affected Software
3 affected componentsFixes available
debian/pdns
4.1.6-3+deb10u14.4.1-14.7.3-24.8.3-1
PowerDNS Authoritative Server<=2.9.21
PowerDNS PowerDNS
Remediation
Event History
Aug 8, 2008
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3337?
CVE-2008-3337 is considered a moderate severity vulnerability that can lead to DNS cache poisoning.
2
How do I fix CVE-2008-3337?
To fix CVE-2008-3337, upgrade PowerDNS Authoritative Server to version 2.9.21.1 or later.
3
What systems are affected by CVE-2008-3337?
CVE-2008-3337 affects PowerDNS Authoritative Server versions prior to 2.9.21.
4
Can CVE-2008-3337 be exploited remotely?
Yes, CVE-2008-3337 can be exploited by remote attackers through malformed DNS queries.
5
What are the consequences of CVE-2008-3337?
The consequence of CVE-2008-3337 is the potential for DNS cache poisoning, impacting the integrity of DNS responses.