Every CVE Search/ Get API key

CVE-2008-3337

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier...

6.4 MediumFix available

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.

Exploit likelihood

6.12%Up 2.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.4

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.

Record
CVE-2008-3337
CVSS 2.0
6.4 MediumAV:N/AC:L/Au:N/C:N/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.

Record
CVE-2008-3337
Updated
2026-11-02
EUVDEUVD-2008-3324 No score

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.

Record
EUVD-2008-3324
Updated
2026-11-03
GitHub AdvisoriesGHSA-rj9p-mrcp-3f7h No score

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier...

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.

Record
GHSA-rj9p-mrcp-3f7h
Weakness
CWE-20
Updated
2026-11-02
OSV No score

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.

Record
CVE-2008-3337
Updated
2026-11-02
OSVDEBIAN-CVE-2008-3337 No score

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.

Record
DEBIAN-CVE-2008-3337
Updated
2026-11-02
OSVopenSUSE-SU-2024:11156-1 No score

pdns-4.5.1-1.5 on GA media

These are all security issues fixed in the pdns-4.5.1-1.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11156-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pdns
Debian:12
 before 2.9.21.1-1
2.9.21.1-1
pdns
Debian:13
 before 2.9.21.1-1
2.9.21.1-1
pdns
Debian:14
 before 2.9.21.1-1
2.9.21.1-1
pdns
Debian:4.0
 before 2.9.20-8+etch1, plus listed versions
2.9.20-8
2.9.20-8+etch1
pdns
openSUSE:Tumbleweed
From an advisory covering 16 CVEs
 before 4.5.1-1.5
4.5.1-1.5

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-3337 is a medium vulnerability (CVSS 6.4) in Powerdns Authoritative Server, published August 8, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.12%, the 93rd percentile. Fixed in pdns 2.9.21.1-1.

References

Show 29 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open