CVE-2006-4252 — Uncontrolled Resource Consumption in Recursor

5 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
0.0%
top 98.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Powerdns Recursor
Timeline
PublishedNov 14
Latest updateMay 1

Description

PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a zero TTL, which triggers an infinite loop.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDpowerdns/recursor3.1.3+11

Patches

Patch: doc.powerdns.com ↗Patch: secunia.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-mx38-c6fm-chc9: PowerDNS Recursor 3↗2022-05-01
▶
CVEList
CVE-2006-4252: PowerDNS Recursor 3↗2006-11-14
▶
OSV
CVE-2006-4252: PowerDNS Recursor 3↗2006-11-14
▶

📋Vendor Advisories

1
Debian
CVE-2006-4252: pdns - PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of...↗2006
▶
CVE-2006-4252 — Uncontrolled Resource Consumption | cvebase