cbcvebase.
CVE-2006-4252
published 2006-11-14

CVE-2006-4252: PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a…

medium5CVSS 3.1
AVNACLAuNCNINAP
PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a zero TTL, which triggers an infinite loop.

Affected

14 ranges
VendorProductVersion rangeFixed in
debianpdns< pdns-recursor 3.1.4-1 (bookworm)pdns-recursor 3.1.4-1 (bookworm)
debianpdns-recursor< pdns-recursor 3.1.4-1 (bookworm)pdns-recursor 3.1.4-1 (bookworm)
powerdnsrecursor<= 3.1.3
powerdnsrecursor
powerdnsrecursor
powerdnsrecursor
powerdnsrecursor
powerdnsrecursor
powerdnsrecursor
powerdnsrecursor
powerdnsrecursor
powerdnsrecursor
powerdnsrecursor
powerdnsrecursor

CVSS provenance

nvd5.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM