ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled;
| Vendor | Product | Versions |
|---|---|---|
| broadcom | symantec endpoint security (ses) | 5.2.0, 5.3.0, 5.4.0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| debian | debian linux | cert_advisory | 90% |
| open source | powerdns | cert_advisory | 90% |
Updated affected versions to include 5.2.10, 5.3.7, and 5.4.2, changed severity to HIGH, and noted that no exploit is available.
Initial creation
