CVEvulnerability
CVE-2015-1868
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-05-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-399
Description
The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.
Affected configurations
• powerdns authoritative 3.2
• powerdns authoritative 3.3
• powerdns authoritative 3.3.1
• powerdns authoritative 3.3.2
• powerdns authoritative 3.4.0
• powerdns authoritative 3.4.1
• powerdns authoritative 3.4.3
• fedoraproject fedora 20
• fedoraproject fedora 21
• fedoraproject fedora 22
• powerdns recursor 3.5
• powerdns recursor 3.5.1
• powerdns recursor 3.5.2
• powerdns recursor 3.5.3
• powerdns recursor 3.6.0
• powerdns recursor 3.6.1
• powerdns recursor 3.6.2
• powerdns recursor 3.6.3
• powerdns recursor 3.7.1
Related
Weakness · not in database (1)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156648.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156655.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156667.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156680.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156725.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156743.html Third Party Advisory
- http://www.debian.org/security/2015/dsa-3306 www.debian.org
- http://www.debian.org/security/2015/dsa-3307 www.debian.org
- http://www.securityfocus.com/bid/74306 Third Party Advisory
- http://www.securitytracker.com/id/1032220 Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156648.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156655.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156667.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156680.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156725.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156743.html Third Party Advisory
- http://www.debian.org/security/2015/dsa-3306 www.debian.org
- http://www.debian.org/security/2015/dsa-3307 www.debian.org
- http://www.securityfocus.com/bid/74306 Third Party Advisory
- http://www.securitytracker.com/id/1032220 Third Party Advisory