CVE-2008-3337

MEDIUM 6.4CVE-2008-3337 · Published 08/08/2008 · updated 16/06/2026

In short

CVE-2008-3337 is a MEDIUM (CVSS 6.4) vulnerability affecting authoritative server (powerdns).
Chance of exploitation in the next 30 days (EPSS): 6.1%, higher than 93.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
authoritative server powerdns	`≤ 2.9.21`	No fix yet

Description

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.

References

doc.powerdns.com/changelog.html
doc.powerdns.com/powerdns-advisory-2008-02.html
lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
mailman.powerdns.com/pipermail/pdns-users/2008-August/005646.html · Patch
secunia.com/advisories/31401
secunia.com/advisories/31407 · Vendor Advisory
secunia.com/advisories/31448
secunia.com/advisories/31687
secunia.com/advisories/33264
security.gentoo.org/glsa/glsa-200812-19.xml
securityfocus.com/bid/30587
vupen.com/english/advisories/2008/2320
exchange.xforce.ibmcloud.com/vulnerabilities/44253
debian.org/security/2008/dsa-1628

More vulnerabilities in authoritative server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free