PT-2012-1018 · Powerdns · Powerdns Authoritative Server

Nils Breunese · Published 2012-01-11 · Updated 2024-06-15 · CVE-2012-0206

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PowerDNS (pdns) Authoritative Server versions prior to 2.9.22.5 PowerDNS (pdns) Authoritative Server versions 3.x prior to 3.0.1

Description The issue allows remote attackers to cause a denial of service, specifically a packet loop, via crafted UDP DNS responses. This is due to a problem in the common startup.cc component of the PowerDNS Authoritative Server.

Recommendations For versions prior to 2.9.22.5, update to version 2.9.22.5 or later. For versions 3.x prior to 3.0.1, update to version 3.0.1 or later.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2015-00660

CVE-2012-0206

DSA-2385-1

OPENSUSE-SU-2024:10136-1

Affected Products

Powerdns Authoritative Server

References · 15

• http://doc.powerdns.com/powerdns-advisory-2012-01.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0206 · Security Note
• https://bdu.fstec.ru/vul/2015-00660 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-0206 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10136-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0206 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2012-0206 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-0206 · Vendor Advisory
• https://suse.com/security/cve/CVE-2016-6172 · Note
• https://suse.com/security/cve/CVE-2015-5230 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=772570 · Note
• http://doc.powerdns.com/changelog.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0206 · Note
• https://suse.com/security/cve/CVE-2015-1868 · Note
• https://suse.com/security/cve/CVE-2012-0206 · Note