CVE-2018-16855

high · 7.5

An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash.

7.5

CVSS

58.6%

EPSS (exploit prob.)

99th

EPSS percentile

2018-12-03

Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-125

Affected products

Vendor	Product	Affected versions
powerdns	recursor	< 4.1.8

Check a specific version with /api/v1/cve/match.

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16855
https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-09.html
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-16855
https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-09.html

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2018-16855