CVE-2015-5311

PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a...

5.0 MediumFix available

PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets.

Exploit likelihood

67.5%Up 66.1 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets.

Record: CVE-2015-5311
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets.

Record: CVE-2015-5311
Updated: 2026-11-02

EUVDEUVD-2015-5283 No score

PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets.

Record: EUVD-2015-5283
Updated: 2026-11-03

GitHub AdvisoriesGHSA-hcqm-j37x-5h8w No score

PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a...

PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets.

Record: GHSA-hcqm-j37x-5h8w
Weakness: CWE-20
Updated: 2026-11-02

OSV No score

PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets.

Record: CVE-2015-5311
Updated: 2026-11-02

OSVDEBIAN-CVE-2015-5311 No score

PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets.

Record: DEBIAN-CVE-2015-5311
Updated: 2026-11-02

OSVUBUNTU-CVE-2015-5311 No score

PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets.

Record: UBUNTU-CVE-2015-5311
Updated: 2026-11-02

Affected products

powerdns authoritative

Affected packages

Affected packages
Package	Affected	Fixed
`pdns` Debian:12	before 3.4.7-1	3.4.7-1
`pdns` Debian:13	before 3.4.7-1	3.4.7-1
`pdns` Debian:14	before 3.4.7-1	3.4.7-1

History

History
Recorded	Changed	Sources
Nov 3, 2026	affected
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-5311 is a medium vulnerability (CVSS 5.0) in Powerdns Authoritative, published November 17, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 67.5%, the 99th percentile. Fixed in pdns 3.4.7-1.

References

Show 5 moreShow less