Integer overflow in [UNKNOWN] pdns
Priority LOW 37CWE-190Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-190 and the CVSS impact.
Summary
An issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0.1 allowing an authorized user to crash the server by inserting a specially crafted record in a zone under their control then sending a DNS query for that record. The issue is due to an integer overflow when checking if the content of the record matches the expected size, allowing an attacker to cause a read past the buffer boundary.
Why it matters now
EPSS 0.01997 80th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| [UNKNOWN] | pdns | up to and including 3.4.10; up to and including 4.0.1 | — | No fix listed | CNA |
- pdns Vendor[UNKNOWN] Affected up to and including 3.4.10; up to and including 4.0.1 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2016-2120
- 2026-10-03 Alias added: GHSA-mq8j-4764-x4h8
References
Sources
- CVE-2016-2120 · CVE Program
- CVE-2016-2120 · NVD
- FIRST EPSS
- GHSA-mq8j-4764-x4h8 · GitHub Advisory Database · CC BY 4.0
- CVE-2016-2120 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences