High severity7.5NVD Advisory· Published Jul 27, 2018· Updated Jun 17, 2026

CVE-2017-15120

Description

An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PowerDNS/Recursor
cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*
Range: <4.0.8
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
PowerDNS/Pdns Recursorllm-fuzzy2 versions
<4.0.8+ 1 more
- (no CPE)range: <4.0.8
- (no CPE)range: 4.0.8

Patches

Vulnerability mechanics

References

seclists.org/oss-sec/2017/q4/382nvdMailing ListPatchThird Party Advisory
doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-08.htmlnvdPatchVendor Advisory
www.securityfocus.com/bid/106335nvdThird Party AdvisoryVDB Entry
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
www.debian.org/security/2017/dsa-4063nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.041
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000