Florian Maury

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned. **Description** A Cache Poisoning issue exists in DNS Response Rate Limiting. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** PowerDNS Recursor versions prior to 3.6.2 **Description** The issue allows remote attackers to cause performance degradations via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezdns.it. This is due to the lack of limitation on delegation chaining. **Recommendations** For PowerDNS Recursor versions prior to 3.6.2, update to version 3.6.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** GnuPG versions prior to 1.4.17 GnuPG versions prior to 2.0.24 GnuPG2 (affected versions not specified) **Description** The issue is related to multiple vulnerabilities in the GnuPG package of the Debian GNU/Linux operating system, which can lead to a disruption of protected information availability. These vulnerabilities can be exploited remotely. Specifically, the `do uncompress` function in `g10/compress.c` allows context-dependent attackers to cause a denial of service (infinite loop) via malformed compressed packets. **Recommendations** For GnuPG versions prior to 1.4.17, update to version 1.4.17 or later to resolve the issue. For GnuPG versions prior to 2.0.24, update to version 2.0.24 or later to resolve the issue. For GnuPG2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.