CVE-2015-1868

Severity

78%

Complexity

99%

Confidentiality

115%

The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.

The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.

CVSS 2.0 Base Score 7.8. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:C).

Overview

First reported 9 years ago

2015-05-18 15:59:00

Last updated 8 years ago

2016-12-28 02:59:00

Affected Software

PowerDNS Authoritative 3.2

3.2

PowerDNS Authoritative 3.3

3.3

PowerDNS Authoritative 3.3.1

3.3.1

PowerDNS Authoritative 3.3.2

3.3.2

PowerDNS Authoritative 3.4.0

3.4.0

PowerDNS Authoritative 3.4.1

3.4.1

PowerDNS Authoritative 3.4.3

3.4.3

Fedora 20

20

Fedora 21

21

Fedora 22

22

PowerDNS Recursor 3.5

3.5

PowerDNS Recursor 3.5.1

3.5.1

PowerDNS Recursor 3.5.2

3.5.2

PowerDNS Recursor 3.5.3

3.5.3

PowerDNS Recursor 3.6.0

3.6.0

PowerDNS Recursor 3.6.1

3.6.1

PowerDNS Recursor 3.6.2

3.6.2

PowerDNS Recursor 3.6.3

3.6.3

PowerDNS Recursor 3.7.1

3.7.1

References

FEDORA-2015-7079

Third Party Advisory

FEDORA-2015-7033

Third Party Advisory

FEDORA-2015-7057

Third Party Advisory

FEDORA-2015-7047

Third Party Advisory

FEDORA-2015-7031

Third Party Advisory

FEDORA-2015-7018

Third Party Advisory

DSA-3306

DSA-3307

74306

Third Party Advisory

1032220

Third Party Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.