vulnerability

FreeBSD: VID-28B69630-9B10-11ED-97A6-6805CA2FA271 (CVE-2023-22617): powerdns-recursor -- denial of service

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Jan 20, 2023
Added
Jan 25, 2023
Modified
Jan 28, 2025

Description

A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1.

Solution

freebsd-upgrade-package-powerdns-recursor
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.