CVE-2015-1868

PowerDNS Authoritative and Recursor - Denial of Service via Label Decompression

Title source: llm

Description

The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.

References (10)

Core 10

Core References

Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156648.html

Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156725.html

Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156743.html

Third Party Advisory vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/74306

Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156655.html

Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156680.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2015/dsa-3306

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2015/dsa-3307

Third Party Advisory vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1032220

Third Party Advisory vendor-advisory x_refsource_fedora

http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156667.html

Scores

EPSS 0.8183

EPSS Percentile 99.6%

Details

CWE

CWE-399

Status published

Products (19)

fedoraproject/fedora 20

fedoraproject/fedora 21

fedoraproject/fedora 22

powerdns/authoritative 3.2

powerdns/authoritative 3.3

powerdns/authoritative 3.3.1

powerdns/authoritative 3.3.2

powerdns/authoritative 3.4.0

powerdns/authoritative 3.4.1

powerdns/authoritative 3.4.3

... and 9 more

Published May 18, 2015

Tracked Since Feb 18, 2026