PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large (1) AXFR or (2) IXFR response.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-pdns | Sep 10, 2016 | Sep 10, 2016 | |
| Freebsd | freebsd-upgrade-package-bind99freebsd-upgrade-package-bind910freebsd-upgrade-package-bind911freebsd-upgrade-package-bind9-develfreebsd-upgrade-package-knotfreebsd-upgrade-package-knot1freebsd-upgrade-package-knot2freebsd-upgrade-package-nsdfreebsd-upgrade-package-powerdns | Dec 10, 2025 | Aug 10, 2016 | |
| Suse | — | suse-upgrade-pdnssuse-upgrade-pdns-backend-ldapsuse-upgrade-pdns-backend-ldap-debuginfosuse-upgrade-pdns-backend-luasuse-upgrade-pdns-backend-lua-debuginfosuse-upgrade-pdns-backend-mydnssuse-upgrade-pdns-backend-mydns-debuginfosuse-upgrade-pdns-backend-mysqlsuse-upgrade-pdns-backend-mysql-debuginfosuse-upgrade-pdns-backend-postgresqlsuse-upgrade-pdns-backend-postgresql-debuginfosuse-upgrade-pdns-backend-sqlite3suse-upgrade-pdns-backend-sqlite3-debuginfosuse-upgrade-pdns-debuginfosuse-upgrade-pdns-debugsource | Aug 26, 2016 | Aug 19, 2016 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Sep 26, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub