CVE-2017-15094 : An issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4.0

An issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4.0.0 up to and including 4.0.6 leading to a memory leak when parsing specially crafted DNSSEC ECDSA keys. These keys are only parsed when validation is enabled by setting dnssec to a value other than off or process-no-validate (default).

Published 2018-01-23 15:29:00

Updated 2019-10-09 23:24:12

Source Red Hat, Inc.

View at NVD, CVE.org

Products affected by CVE-2017-15094

Powerdns » Recursor
Versions from including (>=) 4.0.0 and up to, including, (<=) 4.0.6
cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2017-15094

Top countries where our scanners detected CVE-2017-15094

Top open port discovered on systems with this issue 53

IPs affected by CVE-2017-15094 344

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2017-15094!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2017-15094

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 35 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2017-15094

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.9	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	2.2	3.6	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2017-15094

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

Assigned by: secalert@redhat.com (Secondary)
CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2017-15094

https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-07.html

PowerDNS Security Advisory 2017-07: Memory leak in DNSSEC parsing — PowerDNS Recursor documentation
Mitigation;Patch;Vendor Advisory
http://www.securityfocus.com/bid/101982

PowerDNS Authoritative Server Module Multiple Security Vulnerabilities
Third Party Advisory;VDB Entry

CVEs referencing this url