First published: Thu Apr 27 2006(Updated: )
The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service (application crash) via malformed EDNS0 packets.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
PowerDNS DNSDist | =3.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-2069 is classified as a denial of service vulnerability that can cause an application crash.
To mitigate CVE-2006-2069, upgrade PowerDNS to version 3.0.1 or later which includes the necessary security fixes.
PowerDNS versions prior to 3.0.1 are affected by CVE-2006-2069.
CVE-2006-2069 allows remote attackers to perform denial of service attacks using malformed EDNS0 packets.
The best course of action for CVE-2006-2069 is to apply the available upgrade to a patched version rather than relying on a workaround.