CVE-2023-26437: Deterred spoofing attempts can lead to authoritative servers being marked unavailable
Published Apr 4, 2023
·Updated
Denial of service vulnerability in PowerDNS Recursor allows authoritative servers to be marked unavailable.This issue affects Recursor: through 4.6.5, through 4.7.4 , through 4.8.3.
Affected Software
3 affected components
powerdns recursor<4.6.6
powerdns recursor>=4.7.0<4.7.5
powerdns recursor>=4.8.0<4.8.4
Remediation
Information
Upgrade to PowerDNS Recursor 4.6.6, 4.7.5 or 4.8.4.
Event History
Apr 4, 2023
CVE Published
via MITRE·02:37 PM
Data Sourced
via MITRE·02:37 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2023-26437.
2
What is the severity rating of CVE-2023-26437?
CVE-2023-26437 has a severity rating of 5.3 (medium).
3
How does CVE-2023-26437 affect PowerDNS Recursor?
CVE-2023-26437 in PowerDNS Recursor allows authoritative servers to be marked unavailable.
4
Which versions of PowerDNS Recursor are affected by CVE-2023-26437?
CVE-2023-26437 affects PowerDNS Recursor versions up to and including 4.6.5, 4.7.4, and 4.8.3.
5
How can I fix CVE-2023-26437?
To fix CVE-2023-26437, upgrade PowerDNS Recursor to version 4.6.6 or later, 4.7.5 or later, or 4.8.4 or later.