CVE-2015-1868

High

Published: 18/05/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The label decompression functionality in PowerDNS Recursor in versions 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2, as well as in the Authoritative Server in versions 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4, allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.

Risk Assessment

Attackers can exploit this vulnerability to overload the server, leading to crashes or significant slowdowns, affecting service availability.

Recommendation

It is recommended to upgrade to the latest version of PowerDNS Recursor and the Authoritative Server to mitigate this vulnerability.

Other vulnerabilities in PowerDNS Recursor i serwer autorytatywny

CVE-2015-5470High
The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a long name that refers to itself.

Original NVD description (English source)

The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.