CVE-2015-5230: Input Validation
Published Jan 15, 2020
·Updated
The DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via crafted query packets.
Affected Software
3 affected components
PowerDNS Authoritative>=3.4.0<3.4.6
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Event History
Jan 15, 2020
CVE Published
via MITRE·04:32 PM
Data Sourced
via MITRE·04:32 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2015-5230?
CVE-2015-5230 is a vulnerability in PowerDNS Authoritative Server 3.4.x before 3.4.6 that allows remote attackers to crash the server by sending crafted query packets.
2
How does CVE-2015-5230 impact PowerDNS Authoritative Server?
CVE-2015-5230 can cause a denial of service (crash) on PowerDNS Authoritative Server 3.4.x before 3.4.6.
3
Which software versions are affected by CVE-2015-5230?
PowerDNS Authoritative Server versions 3.4.0 to 3.4.6 are affected by CVE-2015-5230.
4
What is the severity level of CVE-2015-5230?
CVE-2015-5230 has a severity level of high, with a CVSS score of 7.5.
5
How can I fix CVE-2015-5230?
To fix CVE-2015-5230, you should update PowerDNS Authoritative Server to version 3.4.6 or newer.