The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x prior to 3.6.3, and 3.7.x prior to 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x prior to 3.3.2, and 3.4.x prior to 3.4.4 allows remote malicious users to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
powerdns authoritative 3.2 |
||
powerdns authoritative 3.3 |
||
powerdns authoritative 3.3.1 |
||
powerdns authoritative 3.3.2 |
||
powerdns authoritative 3.4.0 |
||
powerdns authoritative 3.4.1 |
||
powerdns authoritative 3.4.3 |
||
fedoraproject fedora 20 |
||
fedoraproject fedora 21 |
||
fedoraproject fedora 22 |
||
powerdns recursor 3.5 |
||
powerdns recursor 3.6.0 |
||
powerdns recursor 3.6.1 |
||
powerdns recursor 3.6.2 |
||
powerdns recursor 3.5.3 |
||
powerdns recursor 3.6.3 |
||
powerdns recursor 3.7.1 |
||
powerdns recursor 3.5.2 |
||
powerdns recursor 3.5.1 |
Vulmon