|
PowerDNS Source Port Randomization Remote Cache Poisoning Vulnerability
PowerDNS is prone to a remote cache-poisoning vulnerability because of a weakness in the use of random number generators. This issue is the result of an incomplete fix to the vulnerability discussed in BID 28517. An attacker may leverage this issue to manipulate cache data, potentially facilitating man-in-the-middle, site-impersonation, or denial-of-service attacks. Versions prior to PowerDNS 3.1.6 are vulnerable to this issue. |
|
|
Privacy Statement |
