[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fluorLsiwV0PuTLWj7Myz46V-dgtKxl2eL7zJI3d4QPg":3,"g5a-risk:CVE-2018-16855":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":15,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":52,"references":53,"referencesCount":65,"weaknesses":66,"weaknessesCount":52,"isActivelyExploited":75,"cisaInfo":15,"otxData":15,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":111,"notableEvents":112},"CVE-2018-16855","What is CVE-2018-16855?","An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash.","An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while ...","2018-12-03T14:29:00.257","2019-10-09T23:36:22.487",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":33,"CVSSMetricV40":15},null,[17,29],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"secalert@redhat.com","Secondary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},[34],{"Source":18,"Type":19,"CVSSData":35,"BaseSeverity":40,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":36,"VectorString":37,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":38,"BaseScore":39,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.58577,[43,43,43,43,43,43,43],"High",[47],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"powerdns","recursor","*","cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*",1,[54,60],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2018-16855","Red Hat",[58,59],"Issue Tracking","Third Party Advisory",{"url":61,"source":62,"tags":63},"https:\u002F\u002Fdocs.powerdns.com\u002Frecursor\u002Fsecurity-advisories\u002Fpowerdns-advisory-2018-09.html","Powerdns",[64],"Vendor Advisory",2,[67],{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":74},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2018-16855? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-16855, a high severity cyber security vulnerability from 2018. High exploit probability (58.6%). An issue has been found i...","CVE-2018-16855, CVE-2018-16855 vulnerability, CVE-2018-16855 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, powerdns security, recursor vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2018-16855",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-16855","Cybersecurity","CVE-2018-16855, CVE-2018-16855 vulnerability, CVE-2018-16855 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":15,"Negate":15,"Nodes":104},[105],{"Operator":106,"Negate":15,"CPEMatch":107},"OR",[108],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":109,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":110,"VersionEndIncluding":15},"64CEF467-CBA0-4ADA-B42F-967407FEAA1D","4.1.8",[],[113,120],{"id":114,"eventType":115,"eventTime":116,"details":117,"label":118,"color":119},"c64acdbd-c895-4b6f-8771-5a2a73fc740f","HIGH_EPSS_DELTA","2025-11-19T04:06:50.126317+00:00","Daily EPSS score increased by 0.563 on 2023-12-30","EPSS Score Increased","red",{"id":121,"eventType":122,"eventTime":123,"details":124,"label":125,"color":126},"2ddcd90b-60a6-42b2-814f-2c62c0ab768c","LOW_EPSS_DELTA","2025-11-22T04:06:38.494943+00:00","Daily EPSS score decreased by 0.563 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":128,"version":36},1792332984680,{"score":130,"band":131,"action":132,"scoredAt":133},52,"Medium","Plan remediation","2026-10-16T06:45:11.526695+00:00"]