CVE-2017-15120

An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service.

• CWE-476
• CWE-476

• http://seclists.org/oss-sec/2017/q4/382Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/106335Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15120Issue Tracking, Third Party Advisory
• https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-08.htmlPatch, Vendor Advisory
• https://www.debian.org/security/2017/dsa-4063Third Party Advisory
• http://seclists.org/oss-sec/2017/q4/382Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/106335Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15120Issue Tracking, Third Party Advisory
• https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-08.htmlPatch, Vendor Advisory
• https://www.debian.org/security/2017/dsa-4063Third Party Advisory

Published

Jul 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15114When libvirtd is configured by OSP director (tripleo-heat-te…
• CVE-2017-15115The sctp_do_peeloff function in net/sctp/socket.c in the Lin…7.8
• CVE-2017-15116The rngapi_reset function in crypto/rng.c in the Linux kerne…
• CVE-2017-15117Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-15118A stack-based buffer overflow vulnerability was found in NBD…8.3
• CVE-2017-15119The Network Block Device (NBD) server in Quick Emulator (QEM…5.8
• CVE-2017-15121A non-privileged user is able to mount a fuse filesystem on …
• CVE-2017-15122Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-15123A flaw was found in the CloudForms web interface, versions 5…5.3
• CVE-2017-15124VNC server implementation in Quick Emulator (QEMU) 2.11.0 an…
• CVE-2017-15125A flaw was found in CloudForms before 5.9.0.22 in the self-s…6.5
• CVE-2017-15126A use-after-free flaw was found in fs/userfaultfd.c in the L…8.1