PT-2021-21338 · Powerdns+1 · Powerdns Authoritative Server+1

Reinier Schoof + 1 · Published 2021-07-27 · Updated 2026-01-10 · CVE-2021-36754

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions PowerDNS Authoritative Server versions 4.5.0 through 4.5.0

Description The issue allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exception.

Recommendations For PowerDNS Authoritative Server version 4.5.0, update to version 4.5.1 to resolve the issue.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2022-2644

ALT-PU-2022-3173

CVE-2021-36754

OPENSUSE-SU-2024:11156-1

Affected Products

Alt Linux

Powerdns Authoritative Server

References · 28

• https://cve.org/CVERecord?id=CVE-2021-36754 · Security Note
• https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2021-01.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-36754 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-36754 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-36754 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11156-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36754 · Security Note
• https://doc.powerdns.com/authoritative/security-advisories/index.html · Vendor Advisory
• https://suse.com/security/cve/CVE-2017-15091 · Note
• https://suse.com/security/cve/CVE-2018-1046 · Note
• https://suse.com/security/cve/CVE-2019-10203 · Note
• https://t.me/cvenotify/18821 · Telegram Post
• https://openwall.com/lists/oss-security/2021/07/26/2 · Note
• https://suse.com/security/cve/CVE-2008-3337 · Note
• https://suse.com/security/cve/CVE-2019-3871 · Note