Unrated severityNVD Advisory· Published Dec 10, 2014· Updated Jun 17, 2026

CVE-2014-8601

Description

PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service ("performance degradations") via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezdns.it.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PowerDNS/Recursor2 versions
cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*range: <=3.6.1
- (no CPE)range: <3.6.2
Debian/linux
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
osv-coords
pkg:rpm/opensuse/pdns-recursor&distro=openSUSE%20Tumbleweed
Range: < 4.0.3-1.2

Patches

Vulnerability mechanics

References

cert.ssi.gouv.fr/site/CERTFR-2014-AVI-512/index.htmlnvdThird Party Advisory
doc.powerdns.com/md/security/powerdns-advisory-2014-02/nvdThird Party Advisory
www.debian.org/security/2014/dsa-3096nvdThird Party Advisory
www.kb.cert.org/vuls/id/264212nvdThird Party AdvisoryUS Government Resource
www.securityfocus.com/bid/71545nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1031310nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.059
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000