CVE-2023-26437 LOW

CVE-2023-26437: Deterred spoofing attempts can lead to authoritative servers being marked unavailable

Vendor Powerdns
Product Recursor
Published April 4, 2023
Last update February 13, 2025
View on NVD All CVEs

CVSS base score

3.4/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:L

What the vulnerability does

01Description

Denial of service vulnerability in PowerDNS Recursor allows authoritative servers to be marked unavailable.This issue affects Recursor: through 4.6.5, through 4.7.4 , through 4.8.3.

Key dates

02Disclosure timeline

April 4, 2023 CVE published
February 13, 2025 Record updated