Vulnerability in Powerdns Recursor
CVE-2012-1193
The resolver in PowerDNS Recursor (aka pdns_recursor) 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.
EPSS: 0.059 (92.5th percentile) — read the EPSS interpretation.
Affected products
- Powerdns Powerdns_recursor — versions 3.3
- N/a — versions n/a
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)
- cve@mitre.org (vendor-advisory, x_refsource_FEDORA)