| Package | Affected versions | Patched versions |
|---|---|---|
| authoritative | = 3.2= 3.3= 3.3.1= 3.3.2= 3.4.0= 3.4.1= 3.4.3 | |
| recursor | = 3.5= 3.5.1= 3.5.2= 3.5.3= 3.6.0= 3.6.1= 3.6.2= 3.6.3= 3.7.1 |
The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free