← Back to browse · API

CVE-2018-16855

Severity
HIGH
CVSS
7.5
EPSS
0.59469
Risk score
50.81
CISA KEV
No
PoC
No
Published
2018-12-03
Modified
2024-08-05
First seen
2026-08-07
Aliases
EUVD-2018-8648, GHSA-QX96-6995-FGRP
Products
Power DNS:pdns-recursor 4.1.8
Sources
euvd EUVD-2018-8648

Description

An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash.

References