CVE-2016-5427

High

Published: 21/09/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

PowerDNS Authoritative Server before version 3.4.10 does not properly handle dots in labels, allowing remote attackers to cause a denial of service via a crafted DNS query.

Risk Assessment

Attackers can cause high CPU consumption on the backend, leading to service unavailability for users.

Recommendation

It is recommended to upgrade PowerDNS to version 3.4.10 or later to mitigate this vulnerability.

Other vulnerabilities in PowerDNS Authoritative Server

CVE-2016-5426High
PowerDNS (also known as pdns) versions before 3.4.10 allow remote attackers to cause a denial of service (backend CPU consumption) via a long qname.

Original NVD description (English source)

PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a . (dot) inside labels, which allows remote attackers to cause a denial of service (backend CPU consumption) via a crafted DNS query.