CVE-2015-1868: High severity PowerDNS Authoritative vulnerability
The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1868?
CVE-2015-1868 is classified as a denial of service vulnerability due to high CPU consumption or crashes.
How do I fix CVE-2015-1868?
To fix CVE-2015-1868, upgrade PowerDNS Recursor to version 3.6.3 or later, and Authoritative Server to version 3.3.2 or later.
Which versions of PowerDNS are affected by CVE-2015-1868?
CVE-2015-1868 affects PowerDNS Recursor versions 3.5.x, 3.6.x prior to 3.6.3, and 3.7.x prior to 3.7.2; and Authoritative Server versions 3.2.x, 3.3.x prior to 3.3.2, and 3.4.x prior to 3.4.4.
What could an attacker achieve by exploiting CVE-2015-1868?
An attacker exploiting CVE-2015-1868 can cause a denial of service condition, impacting service availability.
Are there any workarounds for CVE-2015-1868?
There are no specific workarounds for CVE-2015-1868; users are advised to upgrade to the fixed versions.