Published: 14/11/2006 Updated: 20/07/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

PowerDNS Recursor 3.1.3 and previous versions allows remote malicious users to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a zero TTL, which triggers an infinite loop.

Vulnerable Product	Search on Vulmon	Subscribe to Product
powerdns recursor 2.8
powerdns recursor 2.9.15
powerdns recursor 3.1.2
powerdns recursor
powerdns recursor 3.0
powerdns recursor 3.0.1
powerdns recursor 2.9.16
powerdns recursor 2.9.17
powerdns recursor 2.9.18
powerdns recursor 2.0_rc1
powerdns recursor 3.1
powerdns recursor 3.1.1

Debian Bug report logs - #398559 Security: Remote Stack Overflow (CVE-2006-4252) Package: pdns-recursor; Maintainer for pdns-recursor is pdns-recursor packagers <pdns-recursor@packagesdebianorg>; Source for pdns-recursor is src:pdns-recursor (PTS, buildd, popcon) Reported by: "debian-bts@spamblocknetzgehirnde" <debian ...

NVD-CWE-Other http://doc.powerdns.com/powerdns-advisory-2006-02.html http://www.securityfocus.com/bid/21037 http://secunia.com/advisories/22824 http://lists.suse.com/archive/suse-security-announce/2006-Nov/0007.html http://secunia.com/advisories/22976 http://www.vupen.com/english/advisories/2006/4484 https://exchange.xforce.ibmcloud.com/vulnerabilities/30257 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=398559 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-4252

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect