CVE-2016-5427

PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a

published September 21, 2016

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.2th percentile for exploit probability.

CVSS
—
EPSS
63%
Percentile
99.2
In the wild
Unconfirmed
What it is

PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a . (dot) inside labels, which allows remote attackers to cause a denial of service (backend CPU consumption) via a crafted DNS query.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.62982 · 99.2th percentile
Published
2016-09-21T14:00Z
EPSS history
Timeline
  • 21 SEP 14:00Z
    PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a
    cvelistv5