CVE-2023-22617
Fixed in a distro release EPSS 7%CVSS 7.5
A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1.
Products: powerdns recursor
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | pdns-recursor | 4.8.1-1 |
| Debian 13 | pdns-recursor | 4.8.1-1 |
| Debian 14 | pdns-recursor | 4.8.1-1 |
| Ubuntu Pro 16.04 LTS | pdns-recursor | no fix |
| Ubuntu Pro 18.04 LTS | pdns-recursor | no fix |
| Ubuntu Pro 20.04 LTS | pdns-recursor | no fix |
| Ubuntu Pro 22.04 LTS | pdns-recursor | no fix |
| openSUSE Tumbleweed | pdns-recursor | 4.8.1-1.1 |