Security Advisory

CVE-2020-24698

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-10-02 08:23:44
Last updated 2024-08-04 15:19:09
Assigner mitre
State PUBLISHED

Description

An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker might be able to cause a double-free, leading to a crash or possibly arbitrary code execution. by sending crafted queries with a GSS-TSIG signature.