CVE-2022-37428

Name of the Vulnerable Software and Affected Versions PowerDNS Recursor versions 4.5.9 and earlier, 4.6.2, 4.7.1

Description The issue is related to Improper Cleanup upon a Thrown Exception when protobuf logging is enabled. This can lead to a denial of service, causing the daemon to crash via a DNS query that results in an answer with specific properties.

Recommendations For PowerDNS Recursor versions 4.5.9 and earlier, consider disabling protobuf logging as a temporary workaround until a patch is available. For PowerDNS Recursor version 4.6.2, consider disabling protobuf logging as a temporary workaround until a patch is available. For PowerDNS Recursor version 4.7.1, consider disabling protobuf logging as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.