Remote Denial of Service Vulnerability in PowerDNS Recursor
CVE-2017-15120
7.5HIGH
Key Information:
- Vendor
Powerdns
- Status
- Vendor
- CVE Published:
- 27 July 2018
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2017-15120?
A parsing issue in PowerDNS Recursor prior to version 4.0.8 results in a NULL pointer dereference when processing malformed responses containing a CNAME record of a different class than IN. This vulnerability could allow an unauthenticated remote attacker to trigger a denial of service, potentially disrupting the availability of the DNS service.
Affected Version(s)
pdns-recursor 4.0.8
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.