CVE-2015-5230

HIGH 7.5CVE-2015-5230 · Published 15/01/2020 · updated 17/06/2026

In short

CVE-2015-5230 is a HIGH (CVSS 7.5) vulnerability affecting authoritative (powerdns).
Chance of exploitation in the next 30 days (EPSS): 9.0%, higher than 95.3% of all vulnerabilities.
Fix: update to 3.4.6 or later.

Package	Affected versions	Patched versions
authoritative powerdns	`≥ 3.4.0, < 3.4.6`	`3.4.6`

Description

The DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a denial of service (crash) via crafted query packets.

References

debian.org/security/2015/dsa-3347 · Third Party Advisory
securitytracker.com/id/1033475 · Third Party Advisory
doc.powerdns.com/md/security/powerdns-advisory-2015-02 · Vendor Advisory

More vulnerabilities in authoritative

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free