PowerDNS Authoritative Server < CH HINFO Query Handling DoS

medium Nessus Plugin ID 35375


The remote name server is affected by a denial of service vulnerability.


According to its self-reported version number, the version of the PowerDNS service listening on the remote host is prior to It is, therefore, affected by a denial of service vulnerability when processing specially crafted CH HINFO queries. A remote attacker can exploit this to crash the server.

Note that Nessus has not attempted to exploit this issue but has instead relied only on the application's self-reported version number.
Also, Nessus has not checked for the presence of a workaround, the presence of a patch, or if the server is operating as an authoritative server.


Upgrade to PowerDNS version or later. Alternatively, apply the patch or workaround referenced in the vendor advisory.

See Also


Plugin Details

Severity: Medium

ID: 35375

File Name: powerdns_ch_hinfo.nasl

Version: 1.12

Type: remote

Family: DNS

Published: 1/15/2009

Updated: 11/15/2018

Configuration: Enable paranoid mode

Risk Information


Risk Factor: Low

Score: 3.6


Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/a:powerdns:powerdns, cpe:/a:powerdns:authoritative

Required KB Items: pdns/version_full, pdns/version_source, Settings/ParanoidReport, pdns/version

Exploit Ease: No known exploits are available

Patch Publication Date: 11/18/2008

Vulnerability Publication Date: 11/18/2008

Reference Information

CVE: CVE-2008-5277

BID: 32627

CWE: 16