CVE-2015-1868
Fixed in a distro release EPSS 79%
The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.
Products: powerdns authoritative, fedoraproject fedora, powerdns recursor
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pdns | 3.4.4-1 |
| Debian 12 | pdns-recursor | 3.7.2-1 |
| Debian 13 | pdns | 3.4.4-1 |
| Debian 13 | pdns-recursor | 3.7.2-1 |
| Debian 14 | pdns | 3.4.4-1 |
| Debian 14 | pdns-recursor | 3.7.2-1 |
| Ubuntu 14.04 LTS | pdns | 3.3-2ubuntu0.1 |
| Ubuntu 14.04 LTS | pdns-recursor | 3.5.3-1ubuntu0.1 |
| openSUSE Tumbleweed | pdns | 4.0.1-1.2 |
| openSUSE Tumbleweed | pdns-recursor | 4.0.3-1.2 |