Every CVE Search/ Get API key

CVE-2023-22617

A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS...

7.5 HighFix available

CVE-2023-22617 is a high vulnerability (CVSS 7.5) in Powerdns Recursor, published January 21, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.52%, the 94th percentile. Fixed in pdns-recursor 4.8.1-r0.

A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

7.52%Up 6.5 points since Jan 22, 2023
90%50%10%1%

What each source reports

NVD Score used 7.5

A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1.

Record
CVE-2023-22617
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-674
Updated
2026-11-02
CVE List 7.5

A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1.

Record
CVE-2023-22617
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-674
Updated
2026-11-02
EUVDEUVD-2023-26753 7.5

A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1.

Record
EUVD-2023-26753
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-59qw-42jc-ww5f 7.5

A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS...

A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1.

Record
GHSA-59qw-42jc-ww5f
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-674
Updated
2026-11-02
OSVALPINE-CVE-2023-22617 7.5

A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1.

Record
ALPINE-CVE-2023-22617
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSV 7.5

A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1.

Record
CVE-2023-22617
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-22617 7.5

A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1.

Record
DEBIAN-CVE-2023-22617
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-22617 7.5

A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1.

Record
UBUNTU-CVE-2023-22617
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2024:12628-1 No score

pdns-recursor-4.8.1-1.1 on GA media

These are all security issues fixed in the pdns-recursor-4.8.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12628-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pdns-recursor
Alpine:v3.18
 before 4.8.1-r0
4.8.1-r0
pdns-recursor
Alpine:v3.19
 before 4.8.1-r0
4.8.1-r0
pdns-recursor
Alpine:v3.20
 before 4.8.1-r0
4.8.1-r0
pdns-recursor
Alpine:v3.21
 before 4.8.1-r0
4.8.1-r0
pdns-recursor
Alpine:v3.22
 before 4.8.1-r0
4.8.1-r0
pdns-recursor
Alpine:v3.23
 before 4.8.1-r0
4.8.1-r0
pdns-recursor
Alpine:v3.24
 before 4.8.1-r0
4.8.1-r0
pdns-recursor
Debian:12
 before 4.8.1-1
4.8.1-1
pdns-recursor
Debian:13
 before 4.8.1-1
4.8.1-1
pdns-recursor
Debian:14
 before 4.8.1-1
4.8.1-1
Show 5 moreShow less
Affected packages
PackageAffectedFixed
pdns-recursor
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
3.7.3-14.0.0~alpha1-14.0.0~alpha1-24.0.0~alpha2-24.0.0~alpha2-2ubuntu0.14.0.0~alpha2-2ubuntu0.1+esm1
 None known
pdns-recursor
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.0.6-14.0.6-1build14.0.7-14.1.1-14.1.1-1build14.1.1-24.1.1-2ubuntu0.1~esm1
 None known
pdns-recursor
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
4.2.0-64.2.1-14.2.1-1build14.2.1-1build24.2.1-1ubuntu0.1~esm1
 None known
pdns-recursor
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
4.4.2-34.6.0-1ubuntu14.6.0-1ubuntu1+esm1
 None known
pdns-recursor
openSUSE:Tumbleweed
 before 4.8.1-1.1
4.8.1-1.1

History

History
WhenChangedSources
2026-11-03affected, aliases, referencesOSV
2026-11-02createdCVE List, EUVD, GitHub Advisories, NVD, OSV

References

Show 7 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open