CVE-2014-8601
Fixed in a distro release EPSS 69%
PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service ("performance degradations") via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezdns.it.
Products: debian_linux, powerdns recursor
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pdns-recursor | 3.6.2-1 |
| Debian 13 | pdns-recursor | 3.6.2-1 |
| Debian 14 | pdns-recursor | 3.6.2-1 |
| Debian 6.0 | pdns-recursor | 3.2-4+deb6u1 |
| Debian 7 | pdns-recursor | 3.3-3+deb7u1 |
| Ubuntu 14.04 LTS | pdns-recursor | 3.5.3-1ubuntu0.1 |
| openSUSE Tumbleweed | pdns-recursor | 4.0.3-1.2 |