Published: 10/12/2014 Updated: 06/09/2016

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

PowerDNS Recursor prior to 3.6.2 does not limit delegation chaining, which allows remote malicious users to cause a denial of service ("performance degradations") via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezdns.it.

Vulnerable Product	Search on Vulmon	Subscribe to Product
debian debian linux 7.0
powerdns recursor

Florian Maury from ANSSI discovered a flaw in pdns-recursor, a recursive DNS server : a remote attacker controlling maliciously-constructed zones or a rogue server could affect the performance of pdns-recursor, thus leading to resource exhaustion and a potential denial-of-service For the stable distribution (wheezy), this problem has been fixed in ...

CWE-399 http://doc.powerdns.com/md/security/powerdns-advisory-2014-02/http://www.securitytracker.com/id/1031310 http://www.securityfocus.com/bid/71545 http://www.kb.cert.org/vuls/id/264212 http://cert.ssi.gouv.fr/site/CERTFR-2014-AVI-512/index.html http://www.debian.org/security/2014/dsa-3096 https://nvd.nist.gov https://www.debian.org/security/./dsa-3096 https://www.kb.cert.org/vuls/id/264212

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-8601

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect