CVE-2015-1868

2015-05-1815:59:00

Debian Security Bug Tracker

security-tracker.debian.org

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.045 Low

EPSS

Percentile

92.4%

JSON

The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.

OSVersionArchitecturePackageVersionFilename
Debian12allpdns< 3.4.4-1pdns_3.4.4-1_all.deb
Debian11allpdns< 3.4.4-1pdns_3.4.4-1_all.deb
Debian10allpdns< 3.4.4-1pdns_3.4.4-1_all.deb
Debian999allpdns< 3.4.4-1pdns_3.4.4-1_all.deb
Debian13allpdns< 3.4.4-1pdns_3.4.4-1_all.deb
Debian12allpdns-recursor< 3.7.2-1pdns-recursor_3.7.2-1_all.deb
Debian11allpdns-recursor< 3.7.2-1pdns-recursor_3.7.2-1_all.deb
Debian10allpdns-recursor< 3.7.2-1pdns-recursor_3.7.2-1_all.deb
Debian999allpdns-recursor< 3.7.2-1pdns-recursor_3.7.2-1_all.deb
Debian13allpdns-recursor< 3.7.2-1pdns-recursor_3.7.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	pdns	< 3.4.4-1	pdns_3.4.4-1_all.deb
Debian	11	all	pdns	< 3.4.4-1	pdns_3.4.4-1_all.deb
Debian	10	all	pdns	< 3.4.4-1	pdns_3.4.4-1_all.deb
Debian	999	all	pdns	< 3.4.4-1	pdns_3.4.4-1_all.deb
Debian	13	all	pdns	< 3.4.4-1	pdns_3.4.4-1_all.deb
Debian	12	all	pdns-recursor	< 3.7.2-1	pdns-recursor_3.7.2-1_all.deb
Debian	11	all	pdns-recursor	< 3.7.2-1	pdns-recursor_3.7.2-1_all.deb
Debian	10	all	pdns-recursor	< 3.7.2-1	pdns-recursor_3.7.2-1_all.deb
Debian	999	all	pdns-recursor	< 3.7.2-1	pdns-recursor_3.7.2-1_all.deb
Debian	13	all	pdns-recursor	< 3.7.2-1	pdns-recursor_3.7.2-1_all.deb