{"action":"Upgrade pdns-recursor to 4.3.1-1 or later.","affected":[{"fixed":"4.3.1-1","introduced":"0"}],"component":"pdns-recursor","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["4.3.1-1"],"id":"tcs_01M5NEFS2B9F3CGNNWG7GC0EVT","modified_at":"2026-09-11T11:00:25.058718249Z","published_at":"2020-05-19T17:15:10.163Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-10995","https://security-tracker.debian.org/tracker/CVE-2020-10995"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-10995","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-10995"}],"summary":"PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recur"}