NVD

Id
21053  
Name
CVE-2016-6172  
Description
PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large (1) AXFR or (2) IXFR response.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-09-26  
Modified Date
2017-01-06  
Seq
2016-6172  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
114582 21053 CVE-2016-6172 openSUSE-SU-2016:2116  View
114583 21053 CVE-2016-6172 DSA-3664  View
114584 21053 CVE-2016-6172 [oss-security] 20160706 Malicious primary DNS servers can crash secondaries  View
114585 21053 CVE-2016-6172 91678  View
114586 21053 CVE-2016-6172 https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-401  View
114587 21053 CVE-2016-6172 https://github.com/PowerDNS/pdns/issues/4128  View
114588 21053 CVE-2016-6172 https://github.com/PowerDNS/pdns/issues/4133  View
114589 21053 CVE-2016-6172 https://github.com/PowerDNS/pdns/pull/4134  View
114590 21053 CVE-2016-6172 https://github.com/sischkg/xfer-limit/blob/master/README.md  View
114591 21053 CVE-2016-6172 [dns-operations] 20160704 DNS activities in Japan  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4260 JVNDB-2016-005033 PowerDNS Authoritative Server におけるサービス運用妨害 (DoS) の脆弱性 PowerDNS (別名 pdns) Authoritative Server には、サービス運用妨害 (メモリの枯渇およびセカンダリ DNS サーバのクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-6172 92679 CVE-2016-6172 21053 7.1 6.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005033.html 2016-07-29 2016-10-04 View