CVE-2017-15120: Null Pointer Dereference
An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-15120?
CVE-2017-15120 is an issue found in the parsing of authoritative answers in PowerDNS Recursor before version 4.0.8, which could lead to a NULL pointer dereference and denial of service.
How does CVE-2017-15120 affect PowerDNS Recursor?
CVE-2017-15120 affects PowerDNS Recursor versions before 4.0.8.
What is the severity of CVE-2017-15120?
The severity of CVE-2017-15120 is high, with a severity value of 7.5.
How can an attacker exploit CVE-2017-15120?
An unauthenticated remote attacker can exploit CVE-2017-15120 by sending a specially crafted answer containing a CNAME of a different class than IN, which could cause a denial of service.
How can I mitigate CVE-2017-15120?
To mitigate CVE-2017-15120, update PowerDNS Recursor to version 4.0.8 or later.