Vulnerability in N/a
CVE-2021-36754
PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exception.
EPSS: 0.918 (99.7th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- doc.powerdns.com/authoritative/security-advisories/index.html (x_refsource_MISC)
- [oss-security] 20210726 security advisory 2021-01 for PowerDNS Authoritative Server 4.5.0 (mailing-list, x_refsource_MLIST)
- doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2021-01.ht… (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2021-36754?
- CVE-2021-36754 is a vulnerability in N/a. Published 2021-07-27.
- Is CVE-2021-36754 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.