pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool provided with PowerDNS Authoritative, replaying a specially crafted PCAP file can trigger a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution. This buffer overflow only occurs when the -ecs-stamp option of dnsreplay is used.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 16, 2018 |
| Debian | — | Upgrade pdns | Jul 30, 2024 | Jul 16, 2018 |
| Suse | — | Upgrade pdns-backend-geoipUpgrade pdns-backend-remoteUpgrade pdns-backend-postgresqlUpgrade pdns-backend-mysqlUpgrade pdns-backend-sqlite3Upgrade pdns-backend-luaUpgrade pdns-backend-godbcUpgrade pdns-backend-ldapUpgrade pdns-backend-mydnsUpgrade pdns | May 24, 2018 | May 24, 2018 |
| Ubuntu | — | Upgrade pdns-tools (Ubuntu Pro)Upgrade pdns-server (Ubuntu Pro)Upgrade pdns-recursor (Ubuntu Pro) | Jan 15, 2025 | Jul 16, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub