Candidate: CVE-2015-1868
PublicDate: 2015-05-18 15:59:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1868
 https://doc.powerdns.com/md/security/powerdns-advisory-2015-01/
Description:
 The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x
 before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x,
 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause
 a denial of service (CPU consumption or crash) via a request with a name
 that refers to itself.
Ubuntu-Description:
Notes:
 mdeslaur> 3.2+ pdns only, 3.5+ recursor only
Bugs:
 https://bugs.launchpad.net/ubuntu/+source/pdns/+bug/1450037
Priority: medium
Discovered-by:
Assigned-to:
CVSS: 

Patches_pdns:
upstream_pdns: released (3.4.4)
lucid_pdns: ignored (reached end-of-life)
precise_pdns: not-affected (3.0-1.1ubuntu1)
trusty_pdns: released (3.3-2ubuntu0.1)
trusty/esm_pdns: DNE (trusty was released [3.3-2ubuntu0.1])
utopic_pdns: ignored (reached end-of-life)
vivid_pdns: ignored (reached end-of-life)
vivid/stable-phone-overlay_pdns: DNE
vivid/ubuntu-core_pdns: DNE
wily_pdns: not-affected (3.4.5-1)
xenial_pdns: not-affected (3.4.5-1)
yakkety_pdns: not-affected (3.4.5-1)
devel_pdns: not-affected (3.4.5-1)

Patches_pdns-recursor:
upstream_pdns-recursor: released (3.6.3,3.7.2)
lucid_pdns-recursor: ignored (reached end-of-life)
precise_pdns-recursor: not-affected (3.3-2)
trusty_pdns-recursor: released (3.5.3-1ubuntu0.1)
trusty/esm_pdns-recursor: DNE (trusty was released [3.5.3-1ubuntu0.1])
utopic_pdns-recursor: ignored (reached end-of-life)
vivid_pdns-recursor: released (3.6.2-2+deb8u2build0.15.04.1)
vivid/stable-phone-overlay_pdns-recursor: DNE
vivid/ubuntu-core_pdns-recursor: DNE
wily_pdns-recursor: not-affected (3.7.3-1)
xenial_pdns-recursor: not-affected (3.7.3-1)
yakkety_pdns-recursor: not-affected (3.7.3-1)
devel_pdns-recursor: not-affected (3.7.3-1)