PT-2015-6846 · Powerdns · Powerdns Authoritative Server

Christian Hofstaedtler · Published 2015-11-17 · Updated 2016-12-07 · CVE-2015-5311

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PowerDNS (aka pdns) Authoritative Server versions 3.4.4 through 3.4.6

Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and server crash, via crafted query packets.

Recommendations For PowerDNS (aka pdns) Authoritative Server versions 3.4.4 through 3.4.6, update to version 3.4.7 or later to resolve the issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-5311

Affected Products

Powerdns Authoritative Server

References · 13

• https://security-tracker.debian.org/tracker/CVE-2015-5311 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172193.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5311 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-5311 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171976.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-5311 · Vendor Advisory
• https://doc.powerdns.com/md/security/powerdns-advisory-2015-03 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-5311 · Security Note
• https://ubuntu.com/security/CVE-2015-5311 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171865.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-5311 · Vendor Advisory
• http://securitytracker.com/id/1034098 · Note
• http://openwall.com/lists/oss-security/2015/11/09/3 · Note