← Back

CVE-2015-1868

nvd nist
Published: May 18, 2015Modified: May 6, 2026

JSON object

Loading...
7.8
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:C
Exploitability: 10.0 / Impact: 6.9
Source: NVD

Description

The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.

Affected (19)

2 products
Authoritative
Recursor
1 product
Fedora
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Powerdns
Version 3.2
Version 3.3.1
Version 3.3.2
Version 3.3
Version 3.4.0
Version 3.4.1
Version 3.4.3
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Version 20
Version 21
Version 22
Configuration C
9 vulnerable
Vulnerable SoftwareAffected Versions
Powerdns
Version 3.5.1
Version 3.5.2
Version 3.5.3
Version 3.5
Version 3.6.0
Version 3.6.1
Version 3.6.2
Version 3.6.3
Version 3.7.1

Related CWEs

References (20)

Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.