Unscored severity · published Aug 8, 2008
CVE-2008-3337
PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other…
–
CVSS
6.1%
EPSS
No
On KEV
Description
PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.1% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Authoritative Server · Powerdns
through 2.9.21 · source: NVD
PO
Powerdns · Powerdns
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3337
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3337
doc.powerdns.com
http://doc.powerdns.com/changelog.html
doc.powerdns.com
http://doc.powerdns.com/powerdns-advisory-2008-02.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
Patch
http://mailman.powerdns.com/pipermail/pdns-users/2008-August/005646.html
secunia.com
http://secunia.com/advisories/31401
Vendor Advisory
http://secunia.com/advisories/31407
More from Authoritative Server
8.8
CVE-2019-3871
A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7
7.5
CVE-2022-27227
In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1,…
7.5
CVE-2021-36754
PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exception
6.8
CVE-2016-6172
PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large…
4.3
CVE-2019-10203
PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave…