PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large (1) AXFR or (2) IXFR response.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pdns | Sep 10, 2016 | Sep 10, 2016 |
| Freebsd | — | Upgrade bind910Upgrade bind99Upgrade nsdUpgrade bind911Upgrade knot2Upgrade knot1Upgrade bind9-develUpgrade knotUpgrade powerdns | Dec 10, 2025 | Aug 10, 2016 |
| Suse | — | Upgrade pdns-backend-mydnsUpgrade pdns-backend-luaUpgrade pdns-backend-postgresql-debuginfoUpgrade pdns-debugsourceUpgrade pdns-backend-ldapUpgrade pdns-backend-ldap-debuginfoUpgrade pdns-backend-mydns-debuginfoUpgrade pdns-backend-mysqlUpgrade pdns-backend-sqlite3-debuginfoUpgrade pdnsUpgrade pdns-backend-lua-debuginfoUpgrade pdns-backend-mysql-debuginfoUpgrade pdns-backend-sqlite3Upgrade pdns-debuginfoUpgrade pdns-backend-postgresql | Aug 26, 2016 | Aug 19, 2016 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 26, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub