Vulnerabilities > Powerdns > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2008-07-18 | CVE-2008-3217 | Numeric Errors vulnerability in Powerdns Recursor PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. | 6.8 |
| 2008-04-02 | CVE-2008-1637 | Numeric Errors vulnerability in Powerdns Recursor PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to (a) algorithmic deficiencies in rand and random functions in external libraries, (b) use of a 32-bit seed value, and (c) choice of the time of day as the sole seeding information. | 6.8 |
| 2006-11-14 | CVE-2006-4252 | Remote Denial of Service and Buffer Overflow vulnerability in PowerDNS PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a zero TTL, which triggers an infinite loop. | 5.0 |
| 2006-04-27 | CVE-2006-2069 | Resource Management Errors vulnerability in Powerdns 3.0 The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service (application crash) via malformed EDNS0 packets. | 5.0 |
| 2005-12-31 | CVE-2005-0038 | Remote Denial of Service vulnerability in Multiple Vendor DNS Message Decompression The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop. | 5.0 |
| 2005-07-19 | CVE-2005-2301 | Unspecified vulnerability in Powerdns PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote attackers to cause a denial of service (failure to answer ldap questions) and possibly conduct an LDAP injection attack. | 5.0 |
| 2005-05-02 | CVE-2005-0428 | Remote Denial of Service vulnerability in Powerdns 2.0Rc1/2.8/2.9.15 The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a random stream of bytes. | 5.0 |