PT-2018-5772

Name of the Vulnerable Software and Affected Versions: PowerDNS Recursor versions prior to 4.0.8 Description: The issue is related to the parsing of authoritative answers, which can lead to a denial of service when an unauthenticated remote attacker sends a specially crafted answer containing a...

PowerDNS Recursor Denial of Service Vulnerability

PowerDNS Recursive Server is a high-end name resolution server. A denial-of-service security vulnerability exists in the implementation of PowerDNS Recursor, which can be exploited by attackers to cause a denial of service and memory leakage in Recursor...

PowerDNS Authoritative Server Module Cross-Site Scripting Vulnerability

PowerDNS Recursive Server is a high-end name resolution server. A cross-site scripting vulnerability exists in PowerDNS Recursor 4.0.6 and earlier versions, which can be exploited by an attacker to execute arbitrary code in a user's browser at an affected site...

PowerDNS Recursor API Injection Vulnerability

PowerDNS Recursive Server is a high-end name resolution server. An API injection vulnerability exists in PowerDNS Recursor, which can be exploited by an attacker to execute arbitrary code in a user's browser at an affected site...

[ASA-201711-31] powerdns-recursor: multiple issues

Arch Linux Security Advisory ASA-201711-31 ========================================== Severity: Medium Date : 2017-11-27 CVE-ID : CVE-2017-15090 CVE-2017-15092 CVE-2017-15093 CVE-2017-15094 Package : powerdns-recursor Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-5...

[SECURITY] Fedora 25 Update: pdns-recursor-4.0.4-1.fc25

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

PT-2018-4974

Name of the Vulnerable Software and Affected Versions PowerDNS versions prior to 3.4.11 and 4.0.2 PowerDNS recursor versions prior to 3.7.4 and 4.0.4 Description The issue allows a remote, unauthenticated attacker to cause an abnormal CPU usage load on the PowerDNS server by sending crafted DNS...

The vulnerability of the PowerDNS Recursor software allows a malicious actor to compromise the integrity and accessibility of protected information.

The software PowerDNS Recursor is vulnerable due to the rewriting of cached server names and TTL values in NS records when processing “A” record queries. Exploiting this vulnerability allows a malicious actor to extend the validity of revoked domain names by using non-existent domain names...

The vulnerability of the PowerDNS Recursor software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

Overfilling the buffer in the PowerDNS Recursor allows malicious actors operating remotely to cause service failures abrupt termination of the daemon or execute arbitrary code using specially crafted packages...

The vulnerability of the PowerDNS Recursor software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in PowerDNS Recursor allows malicious actors to manipulate DNS data by using specially crafted zones...

PowerDNS Recursor 3.x < 3.7.3 Label Decompression DoS

According to its self-reported version number, the version of the PowerDNS Recursor listening on the remote host is version 3.x prior to 3.7.3. It is, therefore, affected by a denial of service vulnerability due to improper validation of user-supplied input when handling self-referential names...

PowerDNS Recursor and Authoritative Server Denial of Service Vulnerabilities

PowerDNS Recursor, Authoritative Server are both products of the Dutch company PowerDNS.PowerDNS Recursor is a domain name resolution server.PowerDNS Authoritative Server is a DNS server. A security vulnerability exists in the label decompression feature of PowerDNS Recursor and Authoritative...

DEBIAN-CVE-2015-5470

The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative Auth Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service CPU consumption or crash via a request with a long name that refers to itself. NOTE...

CVE-2015-5470

The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative Auth Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service CPU consumption or crash via a request with a long name that refers to itself. NOTE...

CVE-2015-5470: Undefined Security Weakness

The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative Auth Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service CPU consumption or crash via a request with a long name that refers to itself. NOTE...

Gentoo Security Advisory GLSA 201412-33

Gentoo Linux Local Security Checks GLSA 201412-33 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

openSUSE Security Update : pdns / pdns-recursor (openSUSE-2015-505)

pdns, pdns-recursor were updated to fix two security issues. These security issues were fixed : - CVE-2015-1868: The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative Auth Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before...

PT-2015-6930

Name of the Vulnerable Software and Affected Versions PowerDNS Recursor versions prior to 3.6.4 PowerDNS Recursor versions 3.7.x prior to 3.7.3 PowerDNS Authoritative Server versions prior to 3.3.3 PowerDNS Authoritative Server versions 3.4.x prior to 3.4.5 Description The issue allows remote...

SOL16866 - PowerDNS vulnerabilities CVE-2014-8601 and CVE-2015-1868

CVE-2014-8601 PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service "performance degradations" via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezdns.it. Â CVE-2015-1868 The label...

DEBIAN-CVE-2015-1868

The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative Auth Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service CPU consumption or crash via a request with a name that...