CVE-2023-26437

Published: Apr 4, 2023Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Denial of service vulnerability in PowerDNS Recursor allows authoritative servers to be marked unavailable.This issue affects Recursor: through 4.6.5, through 4.7.4 , through 4.8.3.

Affected (3)

Products: Powerdns: Recursor

Powerdns

1 product

Recursor

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Powerdns Recursor	Before 4.6.6
Powerdns Recursor	From 4.7.0 to 4.7.5
Powerdns Recursor	From 4.8.0 to 4.8.4

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (6)

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2023-02.html

Source: security@open-xchange.com

Vendor Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CN7VMRYKZHG2UDUAK326LXD3JY7NO3LR/

Source: security@open-xchange.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHPD6SIQOG7245GXFQHPUEI4AZ6Y3KD6/

Source: security@open-xchange.com

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2023-02.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CN7VMRYKZHG2UDUAK326LXD3JY7NO3LR/

Source: af854a3a-2127-422b-91ae-364da2661108

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IHPD6SIQOG7245GXFQHPUEI4AZ6Y3KD6/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.