PowerDNS before 2.9.21.2 allows remote attackers to cause a denial of service (daemon crash) via a CH HINFO query.

Remote attackers could crash pdnsd if the daemon was configured with distributor-threads=1. With the default configuration pdns is not affected by this problem (CVE-2008-5277).

According to its self-reported version number, the version of the PowerDNS service listening on the remote host is prior to 2.9.21.2. It is, therefore, affected by a denial of service vulnerability when processing specially crafted CH HINFO queries. A remote attacker can exploit this to crash the server.

Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.
Also, Nessus has not checked for the presence of a workaround, the presence of a patch, or if the server is operating as an authoritative server.

The remote host is affected by the vulnerability described in GLSA-200812-19 (PowerDNS: Multiple vulnerabilities)

    Daniel Drown reported an error when receiving a HINFO CH query     (CVE-2008-5277). Brian J. Dowling of Simplicity Communications     discovered a previously unknown security implication of the PowerDNS     behavior to not respond to certain queries it considers malformed     (CVE-2008-3337).
  Impact :

    A remote attacker could send specially crafted queries to cause a     Denial of Service. The second vulnerability in itself does not pose a     security risk to PowerDNS Nameserver. However, not answering a query     for an invalid DNS record within a valid domain allows for a larger     spoofing window on third-party nameservers for domains being hosted by     PowerDNS Nameserver itself.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Type	Severity
40103	openSUSE Security Update : pdns (pdns-355)	Nessus	SuSE Local Security Checks	Local	medium
35375	PowerDNS Authoritative Server < 2.9.21.2 CH HINFO Query Handling DoS	Nessus	DNS	Remote	medium
35244	GLSA-200812-19 : PowerDNS: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	medium
35028	openSUSE 10 Security Update : pdns (pdns-5836)	Nessus	SuSE Local Security Checks	Local	medium

Detections

Analytics

CVE-2008-5277

high

Tenable Plugins

medium

medium

medium

medium