CVE-2017-15120

moderate-risk

Published 2018-07-27

An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service.

Do I need to act?

0.33% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.5/10 High

NETWORK / LOW complexity

Affected Products (3)

Recursor

Debian Linux

Affected Vendors

Debian Powerdns

References (10)

Mailing List http://seclists.org/oss-sec/2017/q4/382

Third Party Advisory http://www.securityfocus.com/bid/106335

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15120

Patch https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-08....

Third Party Advisory https://www.debian.org/security/2017/dsa-4063

Mailing List http://seclists.org/oss-sec/2017/q4/382

Third Party Advisory http://www.securityfocus.com/bid/106335

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15120

Patch https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-08....

Third Party Advisory https://www.debian.org/security/2017/dsa-4063

/ 100

moderate-risk

Severity 26/34 · High

Exploitability 1/34 · Minimal

Exposure 9/34 · Low