CVE-2017-15094
An issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4.0.0 up to and including 4.0.6 leading to a memory leak when parsing specially crafted DNSSEC ECDSA keys. These keys are only parsed when validation is enabled by setting dnssec to a value other than off or process-no-validate (default).
- Score
- CVSS 3.0 5.9 Medium
- Status
- Modified - secalert@redhat.com
- Published
- 2018-01-23
- Last modified
- 2024-09-16
- Weaknesses
- CWE-401, CWE-772
Affected products
References
- http://www.securityfocus.com/bid/101982
- https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-07.html
