Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38948
HistoryJan 21, 2023 - 12:55 a.m.

Denial Of Service (DoS)

2023-01-2100:55:12
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
pdns-recursor
infinite recursion
dos
remote attacker
dns query

0.003 Low

EPSS

Percentile

65.4%

pdns-recursor is vulnerable to Denial of Service(DoS) attacks. A remote attacker is able to cause infinite recursion in PowerDNS Recursor via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode.