CVE-2023-22617

概要

参考情報

• openwall.com/lists/oss-security/2023/01/20/1 · Mailing List
• docs.powerdns.com/recursor/changelog/4.8.html · Release Notes
• docs.powerdns.com/recursor/security-advisories · Vendor Advisory

recursor のその他の脆弱性

• CVE-2026-33601中 4.9If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zone that result in a null pointer derefer…
• CVE-2026-33600中 4.9An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by a missing consistency check and leading …
• CVE-2026-33262中 5.9An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of ser…
• CVE-2026-33261中 5.9A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service.
• CVE-2026-33260高 7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The i…