CVE-2021-36754 is a high-severity denial-of-service vulnerability affecting PowerDNS Authoritative Server versions 4.5.0 prior to 4.5.1. An unauthenticated attacker can crash the server by sending a specially crafted DNS query (QTYPE 65535), leading to an out-of-bounds exception. This vulnerability has a CVSS score of 7.5, indicating high availability impact with low attack complexity and no user interaction required. While the EPSS score suggests a higher likelihood of exploitation compared to most CVEs, there is currently no evidence of active exploitation, public exploit code, or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 4.5.0, < 4.5.1CPE matchmatch criteria | cpe:2.3:a:powerdns:authoritative_server:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.