Description
PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exception.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | pdns | 4.5.1-1.5 | openSUSE-SU-2024:11156-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | pdns | 4.5.1-r0 | — |
| Alpine v3.23 | pdns | 4.5.1-r0 | — |
| Alpine v3.22 | pdns | 4.5.1-r0 | — |
| Alpine v3.21 | pdns | 4.5.1-r0 | — |
| Alpine v3.20 | pdns | 4.5.1-r0 | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | pdns | 4.5.1-r0 | — |
| Alpine v3.18 | pdns | 4.5.1-r0 | — |
| Alpine v3.17 | pdns | 4.5.1-r0 | — |
| Alpine v3.16 | pdns | 4.5.1-r0 | — |
| Alpine v3.15 | pdns | 4.5.1-r0 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- PowerDNS Authoritative Server - Denial of Service javascript/cves/2021/CVE-2021-36754.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- openSUSE-SU-2024:11156-1 pdns-4.5.1-1.5 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026