Vulnerability in Powerdns

CVE-2005-2302

PowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not properly handle questions from clients that are denied recursion, which could cause a "blank out" of answers to those clients that are allowed to use recursion.

EPSS: 0.004 (31.5th percentile) — read the EPSS interpretation.

Affected products

  • Powerdns — versions 2.9.0, 2.9.1, 2.9.2
  • N/a — versions n/a

References