PT-2023-6887 · Powerdns+2 · Powerdns Recursor+2
Xiang Li
·
Publicado
2023-04-04
·
Atualizado
2024-06-15
·
CVE-2023-26437
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
PowerDNS Recursor versions through 4.6.5
PowerDNS Recursor versions through 4.7.4
PowerDNS Recursor versions through 4.8.3
Description
The issue is related to a denial of service vulnerability in PowerDNS Recursor, where authoritative servers can be marked as unavailable. This can be exploited by a remote attacker to cause a denial of service.
Recommendations
For PowerDNS Recursor versions through 4.6.5, update to a version later than 4.6.5 to resolve the issue.
For PowerDNS Recursor versions through 4.7.4, update to a version later than 4.7.4 to resolve the issue.
For PowerDNS Recursor versions through 4.8.3, update to a version later than 4.8.3 to resolve the issue.
As a temporary workaround, consider restricting access to the PowerDNS Recursor service until a patch is available.
Correção
DoS
Improper Resource Release
Resource Exhaustion
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Debian
Powerdns Recursor
Red Os