CVE-2016-2120

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0.1 allowing an authorized user to crash the server by inserting a specially crafted record in a zone under their control then sending a DNS query for that record. The issue is due to an integer overflow when checking if the content of the record matches the expected size, allowing an attacker to cause a read past the buffer boundary.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
[UNKNOWN]	pdns	up to and including 3.4.10; up to and including 4.0.1

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2120Issue Tracking, Third Party Advisory
https://www.debian.org/security/2017/dsa-3764Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2120Issue Tracking, Third Party Advisory
https://www.debian.org/security/2017/dsa-3764Third Party Advisory

Timeline

Published: Nov 1, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-21215.5A permissions flaw was found in redis, which sets weak permissions on certain files and directories that could potentially contain sensitive CVE-2016-21238.8A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an atta CVE-2016-21245.9A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent o CVE-2016-21256.5It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A serv CVE-2016-21266.5Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) CVE-2016-21386.4In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xss_clean() in class/KippoInput.class.php.CVE-2016-21396.4In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $file_link in class/KippoInput.class.php.CVE-2016-21405.3The libvirt driver in OpenStack Compute (Nova) before 2015.1.4 (kilo) and 12.0.x before 12.0.3 (liberty), when using raw storage and use_cow CVE-2016-21419.8It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker c CVE-2016-21425.5Red Hat OpenShift Enterprise 3.1 uses world-readable permissions on the /etc/origin/master/master-config.yaml configuration file, which allo CVE-2016-21437.8The fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of four page-table levels, which allows local u CVE-2016-21457.5The am_read_post_data function in mod_auth_mellon before 0.11.1 does not check if the ap_get_client_block function returns an error, which a