Arbitrary Code Execution

pdns-recursor is vulnerable to arbitrary code execution. The vulnerability exists as an attacker (with enough privileges to change the system’s hostname) to cause disclosure of uninitialized memory content via a stack-based out-of-bounds read. It only occurs on systems where gethostname() does not have \0 termination of the returned string if the hostname is larger than the supplied buffer.