CVE-2022-37428

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a…

Medium · published August 23, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
73.1
In the wild
Unconfirmed
What it is

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.01444 · 73.1th percentile
Published
2022-08-23T16:33Z
EPSS history
Timeline
  • 23 AUG 16:33Z
    PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a…
    cvelistv5