CVE-2017-15120CWE-476
An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a…
High · published July 27, 2018
Patch now
High probability of exploitation
CVSS calls it high at 7.5. It sits in the 98.9th percentile for exploit probability.
What it is
An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service.
The record
Technical detail
- CVSS v3.0
- 7.5 · HIGH
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.51353 · 98.9th percentile
- Weakness
- CWE-476 · NULL Pointer Dereference
- Published
- 2018-07-27T15:00Z
EPSS history
Timeline