Linux · Security advisory · February 18, 2024

DSA-5626-1: pdns-recursor security update

DSA-5626-1, released February 18, 2024, fixes 1 CVE in pdns-recursor (version 4.8.6-1). None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9999
99th percentile

Fixed package versions

ProductReleaseFixed in
pdns-recursorDebian 12.15 (bookworm)4.8.6-1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-50387 MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers 7.5 0.9999 Exploitation Less Likely
Showing 1 to 1 of 1 1