CVE-2014-8601: Debian Linux

Medium severity, CVSS 5.0. EPSS: 68.9% chance of exploitation in the next 30 days.

PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service ("performance degradations") via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezdns.it.

Affected products

• Debian Debian Linux: version 7.0 only
• Powerdns Recursor: up to and including 3.6.1

Published 2014-12-10. Last modified 2026-06-17.