PowerDNS Authoritative Server < 2.9.21.2 CH HINFO Query Handling DoS

medium Nessus Plugin ID 35375

Language:

Synopsis

The remote name server is affected by a denial of service vulnerability.

Description

According to its self-reported version number, the version of the PowerDNS service listening on the remote host is prior to 2.9.21.2. It is, therefore, affected by a denial of service vulnerability when processing specially crafted CH HINFO queries. A remote attacker can exploit this to crash the server.

Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.
Also, Nessus has not checked for the presence of a workaround, the presence of a patch, or if the server is operating as an authoritative server.

Solution

Upgrade to PowerDNS version 2.9.21.2 or later. Alternatively, apply the patch or workaround referenced in the vendor advisory.

Plugin Details

Severity: Medium

ID: 35375

File Name: powerdns_ch_hinfo.nasl

Version: 1.12

Type: remote

Family: DNS

Published: 1/15/2009

Updated: 11/15/2018

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/a:powerdns:powerdns, cpe:/a:powerdns:authoritative

Required KB Items: Settings/ParanoidReport, pdns/version, pdns/version_full, pdns/version_source

Exploit Ease: No known exploits are available

Patch Publication Date: 11/18/2008

Vulnerability Publication Date: 11/18/2008

Reference Information

CVE: CVE-2008-5277

BID: 32627

CWE: 16

Detections

Analytics