title: Deterred spoofing attempts can lead to authoritative servers being marked unavailable
description: Denial of service vulnerability in PowerDNS Recursor allows authoritative servers to be marked unavailable.This issue affects Recursor: through 4.6.5, through 4.7.4 , through 4.8.3.
problem types: Denial of service
affected:
{
defaultStatus: affected
product: Recursor
vendor: PowerDNS
versions:
lessThanOrEqual: 4.6.5, status: affected, version: 0, versionType: range
lessThanOrEqual: 4.7.4 , status: affected, version: 0, versionType: range
lessThanOrEqual: 4.8.3, status: affected, version: 0, versionType: range
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 3.4
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Upgrade to PowerDNS Recursor 4.6.6, 4.7.5 or 4.8.4.