fkie_cve-2008-5277
Vulnerability from fkie_nvd
Published
2008-12-09 00:30
Modified
2025-04-09 00:30
Severity ?
Summary
PowerDNS before 2.9.21.2 allows remote attackers to cause a denial of service (daemon crash) via a CH HINFO query.



{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BAD2312B-4B45-4615-A04B-371E899E7687",
              "versionEndIncluding": "2.9.21.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:1.99.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9593BDE-0312-4974-9BB0-9F36A2E322CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:1.99.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC86997B-563C-45A1-A00E-4BA528399045",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:1.99.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "302D8930-8978-4F96-8567-FFE729DE090B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:1.99.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "7220C466-C380-44D1-9F34-14CE6F6C74B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:1.99.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3B6317C-4432-4B00-A9A4-2E4E3616CD46",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:1.99.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA1E7C15-C860-45EB-9765-1A0314B00E12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:1.99.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "A24A144D-DD9C-41AA-8813-520BD32BE11D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:1.99.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "9E8F9E1D-324A-4AF1-A4CC-BB1878AC651D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:1.99.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "A076AC5F-2F6C-41B1-9ACB-EF449AE889D5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:1.99.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D72865C-E4EE-414E-B503-6613AE806E2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:1.99.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "165B5D82-A9B1-4FD0-9D2E-936E9F17AB9B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:1.99.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "22CC81DB-C4D8-41E8-913D-A7AE7E944295",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "04B35FA9-6D67-4A72-AD4D-7DB55ABB316A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.0:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "53BFFA37-2992-4E2B-84C5-074AC5884B4D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.0:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "57A9CD23-6152-4C37-968B-3026E08075A4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F54E488-7932-427D-A22A-BA49615CF49A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0AE78107-A82E-442F-B6B6-0EBE631C7536",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDD20EBB-7FF5-4355-ADF8-0967BFE20BD1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC92BD1B-DCB7-4DB1-9B1B-6E71E04B5FEB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "3855CD77-D3BB-4A0A-B442-EFDEB0990AF2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "0983B0D7-07B0-4090-BCFF-244E023B38D0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "058AF85E-5FF5-4FBD-8BEF-F7B227CE6BD1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "D141A8D1-C9A0-450A-827A-A956B8D20A99",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AC7BEE9-06FF-487D-B77D-5F05AA5C6324",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C1E89A2-4993-4208-B67F-52B08A6F1BDF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B340CA64-2358-46E6-8F65-725B6ACE77D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "8ADBB8B1-C732-49BA-9270-F5551A9E2D0D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.3a:*:*:*:*:*:*:*",
              "matchCriteriaId": "80C62126-2E61-4532-BFA2-D66FCCC8C9E2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "4472A3D7-8E17-4D80-AA2D-724C74EEF9E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "07CDE603-2A52-4C6F-B6A3-563D516BB4C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC3E5668-9B66-4C80-8C38-6FF01C342182",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB793844-A30A-4F97-954B-690083E77430",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "B636157B-E627-4EF1-B6C2-640648C001D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "34EEA40F-CD68-4AE9-A305-402BFBEEA23B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "40FFBCCC-3595-4148-A3CD-28FD390FB786",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B7722F1-D913-42A0-93EA-48140F47F221",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "16E26E04-71AA-4A00-B0EE-9A04A63ADBBE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A413F4D-123A-4AA6-A097-9900F9B39817",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F03070D-C76A-4A31-AA0C-E32442EBE83B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2BE9083-C8DA-4CCB-AAA0-8E31A1C566D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:powerdns:powerdns:2.9.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "11FC77A2-E464-4832-ADCD-68D66E7CB29E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "PowerDNS before 2.9.21.2 allows remote attackers to cause a denial of service (daemon crash) via a CH HINFO query."
    },
    {
      "lang": "es",
      "value": "PowerDNS y versiones anteriores a 2.9.21.2 permite a los atacantes remotos causar una denegaci\u00f3n de servicios (ca\u00edda del daemon) a trav\u00e9s de una petici\u00f3n CH HINFO."
    }
  ],
  "id": "CVE-2008-5277",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2008-12-09T00:30:00.317",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://doc.powerdns.com/powerdns-advisory-2008-03.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/32979"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/33264"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200812-19.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1021304"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/32627"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47076"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://doc.powerdns.com/powerdns-advisory-2008-03.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00002.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/32979"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/33264"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200812-19.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1021304"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/32627"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47076"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-16"
        },
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…