CVE-2016-5427 REJECTED

PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a . (dot) inside labels, which allows remote attackers to cause a denial of service (backend CPU consumption) via a crafted DNS query.

EPSS 85.55% · 99.4th percentile

Risk Scores

EPSS Score
85.55%
99.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSpdns0, 3.4.5-1build2, 3.4.6-2

Timeline

References

Open in Interactive Console →