Description
PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | pdns | 3.4.7-1 | — |
| Debian 13 | pdns | 3.4.7-1 | — |
| Debian 12 | pdns | 3.4.7-1 | — |
References
- [oss-security] 20151109 PowerDNS Security Announcement 2015-03 mailing-list
- FEDORA-2015-a3965fd800 vendor-advisory
- 1034098 vdb-entry
- FEDORA-2015-1d49176aa1 vendor-advisory
- https://doc.powerdns.com/md/security/powerdns-advisory-2015-03/
- FEDORA-2015-8b8d94ebbb vendor-advisory