PowerDNS Recursor CVE-2014-3614 Remote Denial of Service Vulnerability

Bugtraq ID:	69778
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-3614
Remote:	Yes
Local:	No
Published:	Sep 12 2014 12:00AM
Updated:	Apr 13 2015 08:21PM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

PowerDNS Recursor CVE-2014-3614 Remote Denial of Service Vulnerability

PowerDNS Recursor is prone to a remote denial-of-service vulnerability.

An attacker can leverage this issue to cause a denial-of-service condition; denying service to legitimate users.

PowerDNS Recursor 3.6.0 is vulnerable; other versions may also be affected.

PowerDNS Recursor CVE-2014-3614 Remote Denial of Service Vulnerability

Attackers will likely use standard tools to exploit this issue.

PowerDNS Recursor CVE-2014-3614 Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

PowerDNS Recursor CVE-2014-3614 Remote Denial of Service Vulnerability

References:

• PowerDNS Homepage (PowerDNS)
  
• PowerDNS Recursor Homepage (PowerDNS.COM BV)
  
• PowerDNS Security Advisory 2014-01: PowerDNS Recursor 3.6.0 can be crashed remot (PowerDNS)
  
• Security Update: PowerDNS Recursor 3.6.1 (PowerDNS)