Deterred spoofing attempts can lead to authoritative servers being marked unavailable
CVE-2023-26437

5.3MEDIUM

Key Information:

Vendor: Powerdns
Status: Recursor
Vendor: CVE Published:; 4 April 2023

Summary

Denial of service vulnerability in PowerDNS Recursor allows authoritative servers to be marked unavailable.This issue affects Recursor: through 4.6.5, through 4.7.4 , through 4.8.3.

Affected Version(s)

Recursor 0 <= 4.6.5

Recursor 0 <= 4.7.4

References

https://docs.powerdns.com/recursor/security-advisories/po...

https://lists.fedoraproject.org/archives/list/package-ann...

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Apr 4, 2023
Vulnerability Reserved
Feb 22, 2023