Lucene search
PRIOn knowledge basePRION:CVE-2016-6172HistorySep 26, 2016 - 4:59 p.m.
Code injection
2016-09-2616:59:00
PRIOn knowledge base
www.prio-n.com
2
PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large (1) AXFR or (2) IXFR response.
References
lists.opensuse.org/opensuse-updates/2016-08/msg00085.html
www.debian.org/security/2016/dsa-3664
www.openwall.com/lists/oss-security/2016/07/06/3
www.securityfocus.com/bid/91678
www.securitytracker.com/id/1036242
doc.powerdns.com/md/changelog/
github.com/PowerDNS/pdns/issues/4128
github.com/PowerDNS/pdns/issues/4133
github.com/PowerDNS/pdns/pull/4134
github.com/sischkg/xfer-limit/blob/master/README.md
lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.html
Related
openvas
openvas
Fedora Update for pdns FEDORA-2016-7098bdc536
2016-08-09 00:00:00
PowerDNS Authoritative Server AXFR Response Denial of Service Vulnerability
2016-07-08 00:00:00
Debian: Security Advisory (DSA-3664-1)
2016-09-09 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: pdns-4.0.1-1.fc24
2016-08-08 20:33:12
ubuntucve
ubuntucve
CVE-2016-6172
2016-09-26 00:00:00
cve
cve
CVE-2016-6172
2016-09-26 16:59:04
nessus
nessus
Fedora 24 : pdns (2016-7098bdc536)
2016-08-09 00:00:00
openSUSE Security Update : pdns (openSUSE-2016-1004)
2016-08-22 00:00:00
Debian DSA-3664-1 : pdns - security update
2016-09-12 00:00:00
debiancve
debiancve
CVE-2016-6172
2016-09-26 16:59:04
cvelist
cvelist
CVE-2016-6172
2016-09-26 16:00:00
nvd
nvd
CVE-2016-6172
2016-09-26 16:59:04
debian
debian
[SECURITY] [DSA 3664-1] pdns security update
2016-09-10 06:47:27
[SECURITY] [DLA 627-1] pdns security update
2016-09-18 12:37:00
[SECURITY] [DSA 3664-1] pdns security update
2016-09-10 06:47:27
osv
osv
pdns - security update
2016-09-18 00:00:00
pdns - security update
2016-09-10 00:00:00
mageia
mageia
Updated pdns packages fix security vulnerability
2016-09-28 08:59:24
freebsd
freebsd
BIND,Knot,NSD,PowerDNS -- denial over service via oversized zone transfers
2016-07-06 00:00:00