An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pdns-recursor | Dec 13, 2017 | Dec 11, 2017 |
| Suse | — | Upgrade pdns-recursorUpgrade pdns-recursor-debugsourceUpgrade pdns-recursor-debuginfo | Dec 20, 2017 | Dec 11, 2017 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 27, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub