Security home


Home / mailingsPDF  

[SECURITY] [DSA 4063-1] pdns-recursor security update

Posted on 11 December 2017
Debian Security Advisory

Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-4063-1 Moritz Muehlenhoff
December 11, 2017
- -------------------------------------------------------------------------

Package : pdns-recursor
CVE ID : CVE-2017-15120

Toshifumi Sakaguchi discovered that PowerDNS Recursor, a high-performance
resolving name server was susceptible to denial of service via a crafted
CNAME answer.

The oldstable distribution (jessie) is not affected.

For the stable distribution (stretch), this problem has been fixed in
version 4.0.4-1+deb9u3.

We recommend that you upgrade your pdns-recursor packages.

For the detailed security status of pdns-recursor please refer to
its security tracker page at:

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at:

Mailing list:



Mailings :

Exploits :