{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/97739?format=json","vulnerability_id":"VCID-thqn-jsc5-ryc6","summary":"PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service (\"performance degradations\") via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezdns.it.","aliases":[{"alias":"CVE-2014-8601"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/5932?format=json","purl":"pkg:deb/debian/pdns-recursor@3.3-3%2Bdeb7u1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1aex-5g1j-6ycu"},{"vulnerability":"VCID-3zj4-68f8-w3he"},{"vulnerability":"VCID-57pa-xjqe-rqhp"},{"vulnerability":"VCID-6g9m-xqf1-nua1"},{"vulnerability":"VCID-8c6p-nczh-83ce"},{"vulnerability":"VCID-8tet-nec6-zkfw"},{"vulnerability":"VCID-b7yf-chf7-23bn"},{"vulnerability":"VCID-bx81-efgj-mkd9"},{"vulnerability":"VCID-dmr2-qydm-d3dt"},{"vulnerability":"VCID-dmsw-hy5g-pug3"},{"vulnerability":"VCID-j6qh-v6js-qubg"},{"vulnerability":"VCID-jvrb-gawg-ufg7"},{"vulnerability":"VCID-ped2-apf8-8ygw"},{"vulnerability":"VCID-q6eg-qzcn-fqbp"},{"vulnerability":"VCID-rpze-v2md-4uca"},{"vulnerability":"VCID-thqn-jsc5-ryc6"},{"vulnerability":"VCID-tmg6-gqrq-2uc9"},{"vulnerability":"VCID-wxe6-kebx-6qbc"},{"vulnerability":"VCID-xhkf-q952-qfc2"},{"vulnerability":"VCID-y5t7-ne53-ufar"},{"vulnerability":"VCID-yrea-z75q-a3cy"},{"vulnerability":"VCID-z8ps-5hq7-5uey"},{"vulnerability":"VCID-zafe-qcj3-pygt"},{"vulnerability":"VCID-zbr8-wzq5-6bg8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@3.3-3%252Bdeb7u1"},{"url":"http://public2.vulnerablecode.io/api/packages/122230?format=json","purl":"pkg:deb/debian/pdns-recursor@3.6.2-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@3.6.2-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/5933?format=json","purl":"pkg:deb/debian/pdns-recursor@3.6.2-2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1aex-5g1j-6ycu"},{"vulnerability":"VCID-3zj4-68f8-w3he"},{"vulnerability":"VCID-57pa-xjqe-rqhp"},{"vulnerability":"VCID-6g9m-xqf1-nua1"},{"vulnerability":"VCID-8c6p-nczh-83ce"},{"vulnerability":"VCID-8tet-nec6-zkfw"},{"vulnerability":"VCID-b7yf-chf7-23bn"},{"vulnerability":"VCID-bx81-efgj-mkd9"},{"vulnerability":"VCID-dmr2-qydm-d3dt"},{"vulnerability":"VCID-dmsw-hy5g-pug3"},{"vulnerability":"VCID-jvrb-gawg-ufg7"},{"vulnerability":"VCID-ped2-apf8-8ygw"},{"vulnerability":"VCID-q6eg-qzcn-fqbp"},{"vulnerability":"VCID-rpze-v2md-4uca"},{"vulnerability":"VCID-tmg6-gqrq-2uc9"},{"vulnerability":"VCID-wxe6-kebx-6qbc"},{"vulnerability":"VCID-xhkf-q952-qfc2"},{"vulnerability":"VCID-y5t7-ne53-ufar"},{"vulnerability":"VCID-yrea-z75q-a3cy"},{"vulnerability":"VCID-z8ps-5hq7-5uey"},{"vulnerability":"VCID-zafe-qcj3-pygt"},{"vulnerability":"VCID-zbr8-wzq5-6bg8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@3.6.2-2"},{"url":"http://public2.vulnerablecode.io/api/packages/122217?format=json","purl":"pkg:deb/debian/pdns-recursor@4.4.2-3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3wzr-2eer-77hf"},{"vulnerability":"VCID-55ew-qe9a-5uen"},{"vulnerability":"VCID-5w5a-jcrh-nyb1"},{"vulnerability":"VCID-6b9g-rn64-8qdm"},{"vulnerability":"VCID-baea-ybbp-fbc3"},{"vulnerability":"VCID-bkjx-b5yp-afg9"},{"vulnerability":"VCID-d5mw-hsbt-u7bj"},{"vulnerability":"VCID-dmn7-brss-q3ck"},{"vulnerability":"VCID-e1js-9ute-3kf8"},{"vulnerability":"VCID-e5n6-qn1d-nkg7"},{"vulnerability":"VCID-jqh9-kg7m-d3dn"},{"vulnerability":"VCID-jt65-9bh8-9bgc"},{"vulnerability":"VCID-me6t-p2ef-43ch"},{"vulnerability":"VCID-rryv-rqx6-53fn"},{"vulnerability":"VCID-rs9f-44nz-z3fc"},{"vulnerability":"VCID-ur4y-xu6a-3qck"},{"vulnerability":"VCID-uzyx-z58g-jkft"},{"vulnerability":"VCID-ww6x-997u-6fhs"},{"vulnerability":"VCID-xas6-wfzz-hbbz"},{"vulnerability":"VCID-xzkz-rsgv-wuaa"},{"vulnerability":"VCID-y53p-jj1w-xqet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@4.4.2-3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/122215?format=json","purl":"pkg:deb/debian/pdns-recursor@4.8.8-1%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3wzr-2eer-77hf"},{"vulnerability":"VCID-6b9g-rn64-8qdm"},{"vulnerability":"VCID-baea-ybbp-fbc3"},{"vulnerability":"VCID-bkjx-b5yp-afg9"},{"vulnerability":"VCID-d5mw-hsbt-u7bj"},{"vulnerability":"VCID-dmn7-brss-q3ck"},{"vulnerability":"VCID-e5n6-qn1d-nkg7"},{"vulnerability":"VCID-jqh9-kg7m-d3dn"},{"vulnerability":"VCID-jt65-9bh8-9bgc"},{"vulnerability":"VCID-rryv-rqx6-53fn"},{"vulnerability":"VCID-rs9f-44nz-z3fc"},{"vulnerability":"VCID-uzyx-z58g-jkft"},{"vulnerability":"VCID-ww6x-997u-6fhs"},{"vulnerability":"VCID-xzkz-rsgv-wuaa"},{"vulnerability":"VCID-y53p-jj1w-xqet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@4.8.8-1%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/122220?format=json","purl":"pkg:deb/debian/pdns-recursor@5.2.9-0%2Bdeb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@5.2.9-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/122218?format=json","purl":"pkg:deb/debian/pdns-recursor@5.4.1-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@5.4.1-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/122219?format=json","purl":"pkg:deb/debian/pdns-recursor@5.4.2-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@5.4.2-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/192143?format=json","purl":"pkg:ebuild/net-dns/pdns-recursor@3.6.1-r1","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/net-dns/pdns-recursor@3.6.1-r1"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/5927?format=json","purl":"pkg:deb/debian/pdns-recursor@3.1.4-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1aex-5g1j-6ycu"},{"vulnerability":"VCID-3zj4-68f8-w3he"},{"vulnerability":"VCID-57pa-xjqe-rqhp"},{"vulnerability":"VCID-5ndt-anxg-5kgc"},{"vulnerability":"VCID-6g9m-xqf1-nua1"},{"vulnerability":"VCID-7xck-xsut-8fez"},{"vulnerability":"VCID-8c6p-nczh-83ce"},{"vulnerability":"VCID-8tet-nec6-zkfw"},{"vulnerability":"VCID-b7yf-chf7-23bn"},{"vulnerability":"VCID-bx81-efgj-mkd9"},{"vulnerability":"VCID-dmr2-qydm-d3dt"},{"vulnerability":"VCID-dmsw-hy5g-pug3"},{"vulnerability":"VCID-j6qh-v6js-qubg"},{"vulnerability":"VCID-jvrb-gawg-ufg7"},{"vulnerability":"VCID-ped2-apf8-8ygw"},{"vulnerability":"VCID-q6eg-qzcn-fqbp"},{"vulnerability":"VCID-rpze-v2md-4uca"},{"vulnerability":"VCID-thqn-jsc5-ryc6"},{"vulnerability":"VCID-tmg6-gqrq-2uc9"},{"vulnerability":"VCID-uqau-dng1-wyct"},{"vulnerability":"VCID-v62r-xucw-kkem"},{"vulnerability":"VCID-wxe6-kebx-6qbc"},{"vulnerability":"VCID-xhkf-q952-qfc2"},{"vulnerability":"VCID-y5t7-ne53-ufar"},{"vulnerability":"VCID-yrea-z75q-a3cy"},{"vulnerability":"VCID-z8ps-5hq7-5uey"},{"vulnerability":"VCID-zafe-qcj3-pygt"},{"vulnerability":"VCID-zbr8-wzq5-6bg8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@3.1.4-1"},{"url":"http://public2.vulnerablecode.io/api/packages/5928?format=json","purl":"pkg:deb/debian/pdns-recursor@3.1.4%2Bv3.1.7-0%2Betch1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1aex-5g1j-6ycu"},{"vulnerability":"VCID-3zj4-68f8-w3he"},{"vulnerability":"VCID-57pa-xjqe-rqhp"},{"vulnerability":"VCID-5ndt-anxg-5kgc"},{"vulnerability":"VCID-6g9m-xqf1-nua1"},{"vulnerability":"VCID-7xck-xsut-8fez"},{"vulnerability":"VCID-8c6p-nczh-83ce"},{"vulnerability":"VCID-8tet-nec6-zkfw"},{"vulnerability":"VCID-b7yf-chf7-23bn"},{"vulnerability":"VCID-bx81-efgj-mkd9"},{"vulnerability":"VCID-dmr2-qydm-d3dt"},{"vulnerability":"VCID-dmsw-hy5g-pug3"},{"vulnerability":"VCID-j6qh-v6js-qubg"},{"vulnerability":"VCID-jvrb-gawg-ufg7"},{"vulnerability":"VCID-ped2-apf8-8ygw"},{"vulnerability":"VCID-q6eg-qzcn-fqbp"},{"vulnerability":"VCID-rpze-v2md-4uca"},{"vulnerability":"VCID-thqn-jsc5-ryc6"},{"vulnerability":"VCID-tmg6-gqrq-2uc9"},{"vulnerability":"VCID-uqau-dng1-wyct"},{"vulnerability":"VCID-v62r-xucw-kkem"},{"vulnerability":"VCID-wxe6-kebx-6qbc"},{"vulnerability":"VCID-xhkf-q952-qfc2"},{"vulnerability":"VCID-y5t7-ne53-ufar"},{"vulnerability":"VCID-yrea-z75q-a3cy"},{"vulnerability":"VCID-z8ps-5hq7-5uey"},{"vulnerability":"VCID-zafe-qcj3-pygt"},{"vulnerability":"VCID-zbr8-wzq5-6bg8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@3.1.4%252Bv3.1.7-0%252Betch1"},{"url":"http://public2.vulnerablecode.io/api/packages/5929?format=json","purl":"pkg:deb/debian/pdns-recursor@3.1.7-1%2Blenny1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1aex-5g1j-6ycu"},{"vulnerability":"VCID-3zj4-68f8-w3he"},{"vulnerability":"VCID-57pa-xjqe-rqhp"},{"vulnerability":"VCID-5ndt-anxg-5kgc"},{"vulnerability":"VCID-6g9m-xqf1-nua1"},{"vulnerability":"VCID-8c6p-nczh-83ce"},{"vulnerability":"VCID-8tet-nec6-zkfw"},{"vulnerability":"VCID-b7yf-chf7-23bn"},{"vulnerability":"VCID-bx81-efgj-mkd9"},{"vulnerability":"VCID-dmr2-qydm-d3dt"},{"vulnerability":"VCID-dmsw-hy5g-pug3"},{"vulnerability":"VCID-j6qh-v6js-qubg"},{"vulnerability":"VCID-jvrb-gawg-ufg7"},{"vulnerability":"VCID-ped2-apf8-8ygw"},{"vulnerability":"VCID-q6eg-qzcn-fqbp"},{"vulnerability":"VCID-rpze-v2md-4uca"},{"vulnerability":"VCID-thqn-jsc5-ryc6"},{"vulnerability":"VCID-tmg6-gqrq-2uc9"},{"vulnerability":"VCID-v62r-xucw-kkem"},{"vulnerability":"VCID-wxe6-kebx-6qbc"},{"vulnerability":"VCID-xhkf-q952-qfc2"},{"vulnerability":"VCID-y5t7-ne53-ufar"},{"vulnerability":"VCID-yrea-z75q-a3cy"},{"vulnerability":"VCID-z8ps-5hq7-5uey"},{"vulnerability":"VCID-zafe-qcj3-pygt"},{"vulnerability":"VCID-zbr8-wzq5-6bg8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@3.1.7-1%252Blenny1"},{"url":"http://public2.vulnerablecode.io/api/packages/5930?format=json","purl":"pkg:deb/debian/pdns-recursor@3.2-4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1aex-5g1j-6ycu"},{"vulnerability":"VCID-3zj4-68f8-w3he"},{"vulnerability":"VCID-57pa-xjqe-rqhp"},{"vulnerability":"VCID-6g9m-xqf1-nua1"},{"vulnerability":"VCID-8c6p-nczh-83ce"},{"vulnerability":"VCID-8tet-nec6-zkfw"},{"vulnerability":"VCID-b7yf-chf7-23bn"},{"vulnerability":"VCID-bx81-efgj-mkd9"},{"vulnerability":"VCID-dmr2-qydm-d3dt"},{"vulnerability":"VCID-dmsw-hy5g-pug3"},{"vulnerability":"VCID-j6qh-v6js-qubg"},{"vulnerability":"VCID-jvrb-gawg-ufg7"},{"vulnerability":"VCID-ped2-apf8-8ygw"},{"vulnerability":"VCID-q6eg-qzcn-fqbp"},{"vulnerability":"VCID-rpze-v2md-4uca"},{"vulnerability":"VCID-thqn-jsc5-ryc6"},{"vulnerability":"VCID-tmg6-gqrq-2uc9"},{"vulnerability":"VCID-wxe6-kebx-6qbc"},{"vulnerability":"VCID-xhkf-q952-qfc2"},{"vulnerability":"VCID-y5t7-ne53-ufar"},{"vulnerability":"VCID-yrea-z75q-a3cy"},{"vulnerability":"VCID-z8ps-5hq7-5uey"},{"vulnerability":"VCID-zafe-qcj3-pygt"},{"vulnerability":"VCID-zbr8-wzq5-6bg8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@3.2-4"},{"url":"http://public2.vulnerablecode.io/api/packages/5931?format=json","purl":"pkg:deb/debian/pdns-recursor@3.2-4%2Bdeb6u1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1aex-5g1j-6ycu"},{"vulnerability":"VCID-3zj4-68f8-w3he"},{"vulnerability":"VCID-57pa-xjqe-rqhp"},{"vulnerability":"VCID-6g9m-xqf1-nua1"},{"vulnerability":"VCID-8c6p-nczh-83ce"},{"vulnerability":"VCID-8tet-nec6-zkfw"},{"vulnerability":"VCID-b7yf-chf7-23bn"},{"vulnerability":"VCID-bx81-efgj-mkd9"},{"vulnerability":"VCID-dmr2-qydm-d3dt"},{"vulnerability":"VCID-dmsw-hy5g-pug3"},{"vulnerability":"VCID-j6qh-v6js-qubg"},{"vulnerability":"VCID-jvrb-gawg-ufg7"},{"vulnerability":"VCID-ped2-apf8-8ygw"},{"vulnerability":"VCID-q6eg-qzcn-fqbp"},{"vulnerability":"VCID-rpze-v2md-4uca"},{"vulnerability":"VCID-thqn-jsc5-ryc6"},{"vulnerability":"VCID-tmg6-gqrq-2uc9"},{"vulnerability":"VCID-wxe6-kebx-6qbc"},{"vulnerability":"VCID-xhkf-q952-qfc2"},{"vulnerability":"VCID-y5t7-ne53-ufar"},{"vulnerability":"VCID-yrea-z75q-a3cy"},{"vulnerability":"VCID-z8ps-5hq7-5uey"},{"vulnerability":"VCID-zafe-qcj3-pygt"},{"vulnerability":"VCID-zbr8-wzq5-6bg8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@3.2-4%252Bdeb6u1"},{"url":"http://public2.vulnerablecode.io/api/packages/5932?format=json","purl":"pkg:deb/debian/pdns-recursor@3.3-3%2Bdeb7u1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1aex-5g1j-6ycu"},{"vulnerability":"VCID-3zj4-68f8-w3he"},{"vulnerability":"VCID-57pa-xjqe-rqhp"},{"vulnerability":"VCID-6g9m-xqf1-nua1"},{"vulnerability":"VCID-8c6p-nczh-83ce"},{"vulnerability":"VCID-8tet-nec6-zkfw"},{"vulnerability":"VCID-b7yf-chf7-23bn"},{"vulnerability":"VCID-bx81-efgj-mkd9"},{"vulnerability":"VCID-dmr2-qydm-d3dt"},{"vulnerability":"VCID-dmsw-hy5g-pug3"},{"vulnerability":"VCID-j6qh-v6js-qubg"},{"vulnerability":"VCID-jvrb-gawg-ufg7"},{"vulnerability":"VCID-ped2-apf8-8ygw"},{"vulnerability":"VCID-q6eg-qzcn-fqbp"},{"vulnerability":"VCID-rpze-v2md-4uca"},{"vulnerability":"VCID-thqn-jsc5-ryc6"},{"vulnerability":"VCID-tmg6-gqrq-2uc9"},{"vulnerability":"VCID-wxe6-kebx-6qbc"},{"vulnerability":"VCID-xhkf-q952-qfc2"},{"vulnerability":"VCID-y5t7-ne53-ufar"},{"vulnerability":"VCID-yrea-z75q-a3cy"},{"vulnerability":"VCID-z8ps-5hq7-5uey"},{"vulnerability":"VCID-zafe-qcj3-pygt"},{"vulnerability":"VCID-zbr8-wzq5-6bg8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pdns-recursor@3.3-3%252Bdeb7u1"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2014-8601","reference_id":"","reference_type":"","scores":[{"value":"0.00759","scoring_system":"epss","scoring_elements":"0.73684","published_at":"2026-06-04T12:55:00Z"},{"value":"0.00759","scoring_system":"epss","scoring_elements":"0.73722","published_at":"2026-06-05T12:55:00Z"},{"value":"0.00759","scoring_system":"epss","scoring_elements":"0.73725","published_at":"2026-06-06T12:55:00Z"},{"value":"0.00759","scoring_system":"epss","scoring_elements":"0.73712","published_at":"2026-06-07T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2014-8601"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8601","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8601"},{"reference_url":"https://security.gentoo.org/glsa/201412-33","reference_id":"GLSA-201412-33","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201412-33"}],"weaknesses":[],"exploits":[],"severity_range_score":null,"exploitability":"0.5","weighted_severity":"0.0","risk_score":null,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-thqn-jsc5-ryc6"}