Integer overflow in PowerDNS - CVE-2016-2120

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU32138

Integer overflow in PowerDNS - CVE-2016-2120

Published: November 1, 2018 / Updated: July 28, 2020


Vulnerability identifier: #VU32138
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-2120
CWE-ID: CWE-190
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote authenticated user to perform a denial of service (DoS) attack.

An issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0.1 allowing an authorized user to crash the server by inserting a specially crafted record in a zone under their control then sending a DNS query for that record. The issue is due to an integer overflow when checking if the content of the record matches the expected size, allowing an attacker to cause a read past the buffer boundary.


Affected software

PowerDNS
Arch Linux
Fedora
Cisco Secure Access Control
pdns (Alpine package)
pdns
pdns-recursor

How to mitigate CVE-2016-2120

Install update from vendor's website.

PowerDNS - update to 3.4.11
pdns (Alpine package) - update to 4.0.3-r0
pdns - addressed in versions 3.4.11-1.el7, 4.0.3-1.fc24, 4.0.3-1.fc25
pdns-recursor - addressed in versions 3.7.4-1.el6, 3.7.4-1.el7, 4.0.4-1.fc24, 4.0.4-1.fc25

External References

Related Security Bulletins