The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pdnsUpgrade pdns-recursor | Jul 30, 2024 | May 18, 2015 |
| Freebsd | — | Upgrade powerdnsUpgrade powerdns-recursor | Dec 10, 2025 | May 1, 2015 |
| Suse | — | Upgrade pdns-recursor-debugsourceUpgrade pdns-recursor-debuginfoUpgrade pdns-recursor | Dec 18, 2015 | May 18, 2015 |
| Ubuntu | — | Upgrade pdns-recursorUpgrade pdns | Nov 19, 2024 | May 18, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub