Description
The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service (application crash) via malformed EDNS0 packets.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | pdns-recursor | 3.0.1-1 | — |
| Debian 13 | pdns-recursor | 3.0.1-1 | — |
| Debian 12 | pdns-recursor | 3.0.1-1 | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | pdns | 4.5.1-1.5 | openSUSE-SU-2024:11156-1 |
Advisories 1
- openSUSE-SU-2024:11156-1 pdns-4.5.1-1.5 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 17711 vdb-entry
- powerdns-recursor-ednso-dos(26100) vdb-entry
- 19831 third-party-advisory
- SUSE-SR:2006:010 vendor-advisory
- 20117 third-party-advisory
- http://doc.powerdns.com/changelog.html#CHANGELOG-RECURSOR-3-0-1
- ADV-2006-1527 vdb-entry