CVE-2020-24698

2020-10-0208:23:44

mitre

www.cve.org

9.9 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.1%

JSON

An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker might be able to cause a double-free, leading to a crash or possibly arbitrary code execution. by sending crafted queries with a GSS-TSIG signature.