PowerDNS Bug in Processing HINFO CH Queries Lets Remote Users Deny Service

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

SecurityTracker Alert ID: 1021304

SecurityTracker URL: http://securitytracker.com/id/1021304

CVE Reference: CVE-2008-5277 (Links to External Site)

Updated: Dec 10 2008

Original Entry Date: Dec 4 2008

Impact: Denial of service via network

Fix Available: Yes Vendor Confirmed: Yes

Version(s): 2.9.21.1 and prior versions

Description: A vulnerability was reported in PowerDNS. A remote user can cause denial of service conditions.

A remote user can send a specially crafted HINFO CH query to cause the target service to crash and restart.

The PowerDNS Recursor is not affected.

Daniel Drown reported this vulnerability.

Impact: A remote user can cause the target service to crash and restart.

Solution: The vendor has issued a fixed version (2.9.21.2).

The vendor's advisory is available at:

http://doc.powerdns.com/powerdns-advisory-2008-03.html

Vendor URL: www.powerdns.com/ (Links to External Site)

Cause: Input validation error

Underlying OS: Linux (Any), UNIX (Any), Windows (Any)

Message History: None.

Date: Thu, 4 Dec 2008 08:56:14 -0500
Subject: PowerDNS


http://doc.powerdns.com/powerdns-advisory-2008-03.html