« Volver al listado

CVE-2006-4251

Estado: ModificadaAlta (7.5)—

Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Powerdns — Recursor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-4251",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security@debian.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-11-14T19:07:00.000",
  "references": [
    {
      "url": "http://doc.powerdns.com/powerdns-advisory-2006-01.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "security@debian.org"
    },
    {
      "url": "http://lists.suse.com/archive/suse-security-announce/2006-Nov/0007.html",
      "source": "security@debian.org"
    },
    {
      "url": "http://secunia.com/advisories/22824",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "security@debian.org"
    },
    {
      "url": "http://secunia.com/advisories/22903",
      "source": "security@debian.org"
    },
    {
      "url": "http://secunia.com/advisories/22976",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.debian.org/security/2006/dsa-1211",
      "source": "security@debian.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/21037",
      "tags": [
        "Patch"
      ],
      "source": "security@debian.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4484",
      "source": "security@debian.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30270",
      "source": "security@debian.org"
    },
    {
      "url": "http://doc.powerdns.com/powerdns-advisory-2006-01.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.suse.com/archive/suse-security-announce/2006-Nov/0007.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/22824",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/22903",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/22976",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2006/dsa-1211",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/21037",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/4484",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/30270",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en PowerDNS Recursor 3.1.3 y anteriores puede que permita a atacantes remotos ejecutar código de su elección mediante consultas TCP DNS mal formadas que previene a Recursor de calcular correctamente la longitud de una consulta TCP DNS."
    }
  ],
  "lastModified": "2026-06-16T22:28:43.040",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0FF03280-64C9-43E0-8A79-DDAFAF049119",
              "versionEndIncluding": "3.1.3"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:2.0_rc1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E02559EA-6C7F-4328-A435-B4F69E640645"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D390616D-8CAB-46D3-864D-09AF99E3A407"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:2.9.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "47DFAA6A-CA5B-4B2A-BFC2-A0DF85BF68D8"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:2.9.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "306EBF4B-2292-4B14-9835-9FD0E82FE7CC"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:2.9.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A31C83E-8A81-4483-A245-FD1C08684183"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:2.9.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "44D51FCC-8AD6-4461-8F48-B77EB2693C89"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38DDFF27-8CBB-468D-9837-C74538E5EF0A"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:3.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B3920499-3580-4EA6-AD56-6515C3B8495A"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:3.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF444F17-46F1-4036-B5F1-CA04F7F19684"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:3.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA1E4934-6690-4A09-8E6E-FE7ED57B9DEE"
            },
            {
              "criteria": "cpe:2.3:a:powerdns:recursor:3.1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D474CF9D-1898-46D3-80B1-2D3743265F56"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@debian.org",
  "evaluatorSolution": "This vulnerability is addressed in the following product release:\r\nPowerDNS, Recursor, 3.1.4"
}