CVE-2014-8601
NoneCVSS
—
EPSS
68.9%
Published
Dec 10, 2014
CISA due date
—
The record
PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service ("performance degradations") via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezdns.it.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | pdns-recursor | 0 | 3.6.2-1 |
| Debian:12 | pdns-recursor | 0 | 3.6.2-1 |
| Debian:13 | pdns-recursor | 0 | 3.6.2-1 |
| Debian:6.0 | pdns-recursor | 0 | 3.2-4+deb6u1 |
| Debian:7 | pdns-recursor | 0 | 3.3-3+deb7u1 |
| Mageia:4 | pdns-recursor | 0 | 3.6.2-1.1.mga4 |
| Ubuntu:14.04:LTS | pdns-recursor | 0 | 3.5.3-1ubuntu0.1 |
| openSUSE:Tumbleweed | pdns-recursor | 0 | 4.0.3-1.2 |
Related vulnerabilities
- CVE-2024-25590 An attacker can publish a zone containing specific Resource Record Sets. Also affects pdns-recursor
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects pdns-recursor
- CVE-2015-5470 The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before… Also affects pdns-recursor
- CVE-2015-1868 The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and… Also affects pdns-recursor
- CVE-2009-4009 Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a… Also affects pdns-recursor
- CVE-2009-4010 Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to… Also affects pdns-recursor
- CVE-2024-25583 A crafted response from an upstream server the recursor has been configured to… Also affects pdns-recursor
- CVE-2026-41983 Null pointer dereference vulnerability in the browser module. Impact: Successful… CWE-399