An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service.
http://seclists.org/oss-sec/2017/q4/382
http://www.securityfocus.com/bid/106335
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15120
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-08.html
Source: MITRE
Published: 2018-07-27
Updated: 2019-10-09
Type: CWE-476
Base Score: 5
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 10
Severity: MEDIUM
Base Score: 7.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 3.9
Severity: HIGH