Lucene search
Arch LinuxASA-201412-9HistoryDec 09, 2014 - 12:00 a.m.
powerdns-recursor: denial of service
2014-12-0900:00:00
Arch Linux
lists.archlinux.org
25
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.123 Low
EPSS
Percentile
94.8%
PowerDNS, while acting as a caching nameserver, can be negatively
impacted by sending queries for specially configured, hard to resolve
domain names. This is the same issue as the ones found in bind
(ASA-201412-7) and unbound (ASA-201412-8).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| any | any | any | powerdns-recursor | < 3.6.2-1 | UNKNOWN |
Related
openvas
openvas
Debian Security Advisory DSA 3096-1 (pdns-recursor - security update)
2014-12-11 00:00:00
Mageia: Security Advisory (MGASA-2014-0522)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-104-1)
2023-03-08 00:00:00
mageia
mageia
Updated pdns-recursor packages fix CVE-2014-8601
2014-12-10 23:09:57
securityvulns
securityvulns
[oss-security] PowerDNS Security Advisory 2014-02
2014-12-11 00:00:00
PowerDNS Recursor DoS
2014-12-11 00:00:00
[SECURITY] [DSA 3096-1] pdns-recursor security update
2014-12-11 00:00:00
nessus
nessus
Debian DLA-104-1 : pdns-recursor security update
2015-03-26 00:00:00
openSUSE Security Update : pdns-recursor (openSUSE-SU-2014:1685-1)
2014-12-23 00:00:00
PowerDNS Recursor 3.x < 3.6.2 Recursive Referral Handling DoS
2016-01-15 00:00:00
debiancve
debiancve
CVE-2014-8601
2014-12-10 15:59:00
ubuntucve
ubuntucve
CVE-2014-8601
2014-12-10 00:00:00
cve
cve
CVE-2014-8601
2014-12-10 15:59:00
debian
debian
[SECURITY] [DSA 3096-1] pdns-recursor security update
2014-12-11 09:19:40
[SECURITY] [DSA 3096-1] pdns-recursor security update
2014-12-11 09:19:40
[SECURITY] [DLA 104-1] pdns-recursor security update
2014-12-11 21:22:39
osv
osv
pdns-recursor - security update
2014-12-11 00:00:00
prion
prion
Design/Logic Flaw
2014-12-10 15:59:00
f5
f5
K16866 : PowerDNS vulnerabilities CVE-2014-8601 and CVE-2015-1868
2015-07-02 00:00:00
SOL16866 - PowerDNS vulnerabilities CVE-2014-8601 and CVE-2015-1868
2015-07-02 00:00:00
cert
cert
Recursive DNS resolver implementations may follow referrals infinitely
2014-12-09 00:00:00
gentoo
gentoo
PowerDNS Recursor: Multiple vulnerabilities
2014-12-22 00:00:00
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.123 Low
EPSS
Percentile
94.8%
Related for ASA-201412-9