CVE-2016-5426

High

Published: 21/09/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

PowerDNS (also known as pdns) versions before 3.4.10 allow remote attackers to cause a denial of service (backend CPU consumption) via a long qname.

Risk Assessment

Attackers can cause high CPU consumption on the backend server, leading to service unavailability.

Recommendation

It is recommended to upgrade PowerDNS to version 3.4.10 or later to mitigate this vulnerability.

Other vulnerabilities in PowerDNS Authoritative Server

CVE-2016-5427High
PowerDNS Authoritative Server before version 3.4.10 does not properly handle dots in labels, allowing remote attackers to cause a denial of service via a crafted DNS query.

Original NVD description (English source)

PowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service (backend CPU consumption) via a long qname.