PowerDNS Remote Denial of Service and Buffer Overflow Vulnerabilities

Bugtraq ID:	21037
Class:	Unknown
CVE:	CVE-2006-4251 CVE-2006-4252
Remote:	Yes
Local:	No
Published:	Nov 13 2006 12:00AM
Updated:	Jan 11 2007 09:30PM
Credit:	The vendor reported these issues.
Vulnerable:	S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 10.1 PowerDNS PowerDNS 3.1.3 PowerDNS PowerDNS 3.1.2 PowerDNS PowerDNS 3.1.1 PowerDNS PowerDNS 3.0.1 PowerDNS PowerDNS 3.0 PowerDNS PowerDNS 2.9.19 PowerDNS PowerDNS 2.9.18 PowerDNS PowerDNS 2.9.17 + Gentoo Linux PowerDNS PowerDNS 2.9.16 PowerDNS PowerDNS 2.9.15 + Gentoo Linux PowerDNS PowerDNS 2.8 PowerDNS PowerDNS 2.0 RC1 PowerDNS PowerDNS 3.1 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1
Not Vulnerable:	PowerDNS PowerDNS 3.1.4 + Debian Linux 4.0 sparc + Debian Linux 4.0 s/390 + Debian Linux 4.0 powerpc + Debian Linux 4.0 mipsel + Debian Linux 4.0 mips + Debian Linux 4.0 m68k + Debian Linux 4.0 ia-64 + Debian Linux 4.0 ia-32 + Debian Linux 4.0 hppa + Debian Linux 4.0 arm + Debian Linux 4.0 amd64 + Debian Linux 4.0 alpha + Debian Linux 4.0

PowerDNS Remote Denial of Service and Buffer Overflow Vulnerabilities

A denial-of-service vulnerability and a buffer-overflow vulnerability affect PowerDNS.

Successfully exploiting the buffer-overflow issue allows remote attackers to execute arbitrary machine code in the context of the PowerDNS Recursor, facililtating a remote compromise of affected computers. Attackers may exploit the denial-of-service vulnerability to crash the PowerDNS Recursor, denying further DNS service to legitimate users.

PowerDNS Recursor versions prior to 3.1.4 are affected by these issues.

PowerDNS Remote Denial of Service and Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for the buffer-overflow issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Attackers can use standard DNS server and client software to exploit the denial-of-service issue.

PowerDNS Remote Denial of Service and Buffer Overflow Vulnerabilities

Solution:
PowerDNS version 3.1.4 is available to address these issues.

Please see the references for more information on obtaining and applying fixes.


PowerDNS PowerDNS 3.1

• PowerDNS pdns-recursor-3.1.4.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.4.tar.bz2

PowerDNS PowerDNS 2.0 RC1

• PowerDNS pdns-recursor-3.1.4.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.4.tar.bz2

PowerDNS PowerDNS 2.8

• PowerDNS pdns-recursor-3.1.4.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.4.tar.bz2

PowerDNS PowerDNS 2.9.15

• PowerDNS pdns-recursor-3.1.4.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.4.tar.bz2

PowerDNS PowerDNS 2.9.16

• PowerDNS pdns-recursor-3.1.4.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.4.tar.bz2

PowerDNS PowerDNS 2.9.17

• Debian pdns-backend-geo_2.9.17-13sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.17-13sarge3_amd64.deb


• Debian pdns-backend-geo_2.9.17-13sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.17-13sarge3_arm.deb


• Debian pdns-backend-geo_2.9.17-13sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.17-13sarge3_hppa.deb


• Debian pdns-backend-geo_2.9.17-13sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.17-13sarge3_i386.deb


• Debian pdns-backend-geo_2.9.17-13sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.17-13sarge3_ia64.deb


• Debian pdns-backend-geo_2.9.17-13sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.17-13sarge3_mips.deb


• Debian pdns-backend-geo_2.9.17-13sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.17-13sarge3_mipsel.deb


• Debian pdns-backend-geo_2.9.17-13sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.17-13sarge3_powerpc.deb


• Debian pdns-backend-geo_2.9.17-13sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-geo_2 .9.17-13sarge3_s390.deb


• Debian pdns-backend-ldap_2.9.17-13sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.17-13sarge3_amd64.deb


• Debian pdns-backend-ldap_2.9.17-13sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.17-13sarge3_arm.deb


• Debian pdns-backend-ldap_2.9.17-13sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.17-13sarge3_hppa.deb


• Debian pdns-backend-ldap_2.9.17-13sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.17-13sarge3_i386.deb


• Debian pdns-backend-ldap_2.9.17-13sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.17-13sarge3_ia64.deb


• Debian pdns-backend-ldap_2.9.17-13sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.17-13sarge3_mips.deb


• Debian pdns-backend-ldap_2.9.17-13sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.17-13sarge3_mipsel.deb


• Debian pdns-backend-ldap_2.9.17-13sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.17-13sarge3_powerpc.deb


• Debian pdns-backend-ldap_2.9.17-13sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-ldap_ 2.9.17-13sarge3_s390.deb


• Debian pdns-backend-mysql_2.9.17-13sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.17-13sarge3_amd64.deb


• Debian pdns-backend-mysql_2.9.17-13sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.17-13sarge3_arm.deb


• Debian pdns-backend-mysql_2.9.17-13sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.17-13sarge3_hppa.deb


• Debian pdns-backend-mysql_2.9.17-13sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.17-13sarge3_i386.deb


• Debian pdns-backend-mysql_2.9.17-13sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.17-13sarge3_ia64.deb


• Debian pdns-backend-mysql_2.9.17-13sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.17-13sarge3_mips.deb


• Debian pdns-backend-mysql_2.9.17-13sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.17-13sarge3_mipsel.deb


• Debian pdns-backend-mysql_2.9.17-13sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.17-13sarge3_powerpc.deb


• Debian pdns-backend-mysql_2.9.17-13sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-mysql _2.9.17-13sarge3_s390.deb


• Debian pdns-backend-pgsql_2.9.17-13sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.17-13sarge3_amd64.deb


• Debian pdns-backend-pgsql_2.9.17-13sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.17-13sarge3_arm.deb


• Debian pdns-backend-pgsql_2.9.17-13sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.17-13sarge3_hppa.deb


• Debian pdns-backend-pgsql_2.9.17-13sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.17-13sarge3_i386.deb


• Debian pdns-backend-pgsql_2.9.17-13sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.17-13sarge3_ia64.deb


• Debian pdns-backend-pgsql_2.9.17-13sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.17-13sarge3_mips.deb


• Debian pdns-backend-pgsql_2.9.17-13sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.17-13sarge3_mipsel.deb


• Debian pdns-backend-pgsql_2.9.17-13sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.17-13sarge3_powerpc.deb


• Debian pdns-backend-pgsql_2.9.17-13sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pgsql _2.9.17-13sarge3_s390.deb


• Debian pdns-backend-pipe_2.9.17-13sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.17-13sarge3_amd64.deb


• Debian pdns-backend-pipe_2.9.17-13sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.17-13sarge3_arm.deb


• Debian pdns-backend-pipe_2.9.17-13sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.17-13sarge3_hppa.deb


• Debian pdns-backend-pipe_2.9.17-13sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.17-13sarge3_i386.deb


• Debian pdns-backend-pipe_2.9.17-13sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.17-13sarge3_ia64.deb


• Debian pdns-backend-pipe_2.9.17-13sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.17-13sarge3_mips.deb


• Debian pdns-backend-pipe_2.9.17-13sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.17-13sarge3_mipsel.deb


• Debian pdns-backend-pipe_2.9.17-13sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.17-13sarge3_powerpc.deb


• Debian pdns-backend-pipe_2.9.17-13sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-pipe_ 2.9.17-13sarge3_s390.deb


• Debian pdns-backend-sqlite_2.9.17-13sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.17-13sarge3_amd64.deb


• Debian pdns-backend-sqlite_2.9.17-13sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.17-13sarge3_arm.deb


• Debian pdns-backend-sqlite_2.9.17-13sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.17-13sarge3_hppa.deb


• Debian pdns-backend-sqlite_2.9.17-13sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.17-13sarge3_i386.deb


• Debian pdns-backend-sqlite_2.9.17-13sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.17-13sarge3_ia64.deb


• Debian pdns-backend-sqlite_2.9.17-13sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.17-13sarge3_mips.deb


• Debian pdns-backend-sqlite_2.9.17-13sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.17-13sarge3_mipsel.deb


• Debian pdns-backend-sqlite_2.9.17-13sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.17-13sarge3_powerpc.deb


• Debian pdns-backend-sqlite_2.9.17-13sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-backend-sqlit e_2.9.17-13sarge3_s390.deb


• Debian pdns-doc_2.9.17-13sarge3_all.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-doc_2.9.17-13 sarge3_all.deb


• Debian pdns-recursor_2.9.17-13sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-recursor_2.9. 17-13sarge3_amd64.deb


• Debian pdns-recursor_2.9.17-13sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-recursor_2.9. 17-13sarge3_arm.deb


• Debian pdns-recursor_2.9.17-13sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-recursor_2.9. 17-13sarge3_hppa.deb


• Debian pdns-recursor_2.9.17-13sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-recursor_2.9. 17-13sarge3_i386.deb


• Debian pdns-recursor_2.9.17-13sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-recursor_2.9. 17-13sarge3_ia64.deb


• Debian pdns-recursor_2.9.17-13sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-recursor_2.9. 17-13sarge3_mips.deb


• Debian pdns-recursor_2.9.17-13sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-recursor_2.9. 17-13sarge3_mipsel.deb


• Debian pdns-recursor_2.9.17-13sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-recursor_2.9. 17-13sarge3_powerpc.deb


• Debian pdns-recursor_2.9.17-13sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-recursor_2.9. 17-13sarge3_s390.deb


• Debian pdns-server_2.9.17-13sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.17 -13sarge3_amd64.deb


• Debian pdns-server_2.9.17-13sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.17 -13sarge3_arm.deb


• Debian pdns-server_2.9.17-13sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.17 -13sarge3_hppa.deb


• Debian pdns-server_2.9.17-13sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.17 -13sarge3_i386.deb


• Debian pdns-server_2.9.17-13sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.17 -13sarge3_ia64.deb


• Debian pdns-server_2.9.17-13sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.17 -13sarge3_mips.deb


• Debian pdns-server_2.9.17-13sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.17 -13sarge3_mipsel.deb


• Debian pdns-server_2.9.17-13sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.17 -13sarge3_powerpc.deb


• Debian pdns-server_2.9.17-13sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns-server_2.9.17 -13sarge3_s390.deb


• Debian pdns_2.9.17-13sarge3_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.17-13sarg e3_amd64.deb


• Debian pdns_2.9.17-13sarge3_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.17-13sarg e3_arm.deb


• Debian pdns_2.9.17-13sarge3_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.17-13sarg e3_hppa.deb


• Debian pdns_2.9.17-13sarge3_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.17-13sarg e3_i386.deb


• Debian pdns_2.9.17-13sarge3_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.17-13sarg e3_ia64.deb


• Debian pdns_2.9.17-13sarge3_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.17-13sarg e3_mips.deb


• Debian pdns_2.9.17-13sarge3_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.17-13sarg e3_mipsel.deb


• Debian pdns_2.9.17-13sarge3_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.17-13sarg e3_powerpc.deb


• Debian pdns_2.9.17-13sarge3_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/p/pdns/pdns_2.9.17-13sarg e3_s390.deb


• PowerDNS pdns-recursor-3.1.4.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.4.tar.bz2


• SuSE pdns-2.9.17-4.5.i586.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/pdns-2.9.17-4.5.i 586.rpm


• SuSE pdns-2.9.17-4.5.x86_64.rpm
  SUSE LINUX 9.3:
  ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/pdns-2.9.17-4.5 .x86_64.rpm


• SuSE pdns-2.9.17-7.3.i586.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/pdns-2.9.17-7.3. i586.rpm


• SuSE pdns-2.9.17-7.3.ppc.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/pdns-2.9.17-7.3.p pc.rpm


• SuSE pdns-2.9.17-7.3.x86_64.rpm
  SUSE LINUX 10.0:
  ftp://ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/pdns-2.9.17-7. 3.x86_64.rpm

PowerDNS PowerDNS 2.9.18

• PowerDNS pdns-recursor-3.1.4.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.4.tar.bz2

PowerDNS PowerDNS 2.9.19

• SuSE pdns-2.9.19-13.4.i586.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/i586/pdns-2.9.19-13.4.i586 .rpm


• SuSE pdns-2.9.19-13.4.ppc.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/ppc/pdns-2.9.19-13.4.ppc.r pm


• SuSE pdns-2.9.19-13.4.x86_64.rpm
  SUSE LINUX 10.1:
  ftp://ftp.suse.com/pub/suse/update/10.1/rpm/x86_64/pdns-2.9.19-13.4.x8 6_64.rpm

PowerDNS PowerDNS 3.0

• PowerDNS pdns-recursor-3.1.4.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.4.tar.bz2

PowerDNS PowerDNS 3.0.1

• PowerDNS pdns-recursor-3.1.4.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.4.tar.bz2

PowerDNS PowerDNS 3.1.1

• PowerDNS pdns-recursor-3.1.4.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.4.tar.bz2

PowerDNS PowerDNS 3.1.2

• PowerDNS pdns-recursor-3.1.4.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.4.tar.bz2

PowerDNS PowerDNS 3.1.3

• PowerDNS pdns-recursor-3.1.4.tar.bz2
  http://downloads.powerdns.com/releases/pdns-recursor-3.1.4.tar.bz2

PowerDNS Remote Denial of Service and Buffer Overflow Vulnerabilities

References:

• PowerDNS Product Page (PowerDNS)
  
• PowerDNS Release Notes (PowerDNS)
  
• PowerDNS Security Advisory 2006-01: Malformed TCP queries can lead to a buffer o (PowerDNS)
  
• PowerDNS Security Advisory 2006-02: Zero second CNAME TTLs can make PowerDNS exh (PowerDNS)