CVE-2005-0428

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-02 · updated 2026-06-16

Description

The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a random stream of bytes.

Affected products

PowerDNS: 2.0_rc1, 2.8, 2.9.15

References

http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-17
http://ds9a.nl/cgi-bin/cvstrac/pdns/tktview?tn=21
http://www.gentoo.org/security/en/glsa/glsa-200502-15.xml
http://www.securityfocus.com/bid/12446
https://exchange.xforce.ibmcloud.com/vulnerabilities/19221
http://doc.powerdns.com/changelog.html#CHANGELOG-2-9-17
http://ds9a.nl/cgi-bin/cvstrac/pdns/tktview?tn=21
http://www.gentoo.org/security/en/glsa/glsa-200502-15.xml
http://www.securityfocus.com/bid/12446
https://exchange.xforce.ibmcloud.com/vulnerabilities/19221

Get alerted when CVE-2005-0428 or the next vulnerability affects your stack