Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Open-Xchange pdns — DSA-3764 Clear all filters
TI-2016-06081 CVE-2016-7074 · GHSA-pwxm-qc32-g74q

Improper input validation in Open-Xchange GmbH pdns

Priority LOW 29

An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01222 Published 2018-09-11 No fix listed CWE-20
TI-2016-06080 CVE-2016-7073 · GHSA-pm63-cw3m-c2g8

Improper input validation in Open-Xchange GmbH pdns

Priority LOW 29

An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.01233 Published 2018-09-11 No fix listed CWE-20
TI-2016-06075 CVE-2016-7068 · GHSA-g832-5583-wc79

Improper input validation in Open-Xchange GmbH pdns

Priority MEDIUM 43

An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 3.7.4 and 4.0.4, allowing a remote, unauthenticated attacker to cause an abnormal CPU usage load on the PowerDNS server by sending…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.07294 Published 2018-09-11 No fix listed CWE-20
TI-2016-06079 CVE-2016-7072 · GHSA-64pc-8jh2-hf6v

Improper input validation in Open-Xchange GmbH pdns

Priority MEDIUM 42

An issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a remote, unauthenticated attacker to cause a denial of service by opening a large number of TCP connections to the web server.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0615 Published 2018-09-10 No fix listed CWE-20