CVE-2022-37428
Fixed in a distro release EPSS 1%CVSS 6.5
PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.
Products: powerdns recursor, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pdns-recursor | 4.7.2-1 |
| Debian 13 | pdns-recursor | 4.7.2-1 |
| Debian 14 | pdns-recursor | 4.7.2-1 |
| SUSE Package Hub 15 SP4 | pdns-recursor | 4.6.3-bp154.2.3.1 |
| Ubuntu Pro 16.04 LTS | pdns-recursor | no fix |
| Ubuntu Pro 18.04 LTS | pdns-recursor | no fix |
| Ubuntu Pro 20.04 LTS | pdns-recursor | no fix |
| Ubuntu Pro 22.04 LTS | pdns-recursor | no fix |
| openSUSE Leap 15.4 | pdns-recursor | 4.6.3-bp154.2.3.1 |
| openSUSE Tumbleweed | pdns-recursor | 4.7.2-1.1 |