PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets.

This update for pdns fixes the following issues :

  - maliciously crafted packets could cause pdns to trigger     an assertion and thus lead to DoS (CVE-2015-5311,     boo#954402)

- Update to 3.4.7 - CVE-2015-5311 Release notes:
    https://doc.powerdns.com/md/changelog/#powerdns-authorit     ative-server-347

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version number, the version of the PowerDNS Authoritative Server listening on the remote host is version 3.4.4, 3.4.5, or 3.4.6. It is, therefore, affected by a denial of service vulnerability due to an assertion flaw that is triggered when handling malformed packets. An unauthenticated, remote attacker can exploit this vulnerability, via crafted query packets, to crash the server.

Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.
Also, Nessus has not checked for the presence of the patch.

PowerDNS reports :

A bug was found using afl-fuzz in our packet parsing code. This bug, when exploited, causes an assertion error and consequent termination of the the pdns_server process, causing a Denial of Service.

ID	Name	Product	Family	Severity
95706	openSUSE Security Update : pdns (openSUSE-2016-1433)	Nessus	SuSE Local Security Checks	medium
89351	Fedora 21 : pdns-3.4.7-1.fc21 (2015-a3965fd800)	Nessus	Fedora Local Security Checks	medium
89316	Fedora 23 : pdns-3.4.7-1.fc23 (2015-8b8d94ebbb)	Nessus	Fedora Local Security Checks	medium
89166	Fedora 22 : pdns-3.4.7-1.fc22 (2015-1d49176aa1)	Nessus	Fedora Local Security Checks	medium
87947	PowerDNS Authoritative Server 3.4.4 / 3.4.5 / 3.4.6 Process Packet Handling DoS	Nessus	DNS	medium
86806	FreeBSD : powerdns -- Denial of Service (56665ccb-8723-11e5-9b13-14dae9d210b8)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2015-5311

high

Tenable Plugins

medium

medium

medium

medium

medium

medium