An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated in SyncRes::processAnswer, allowing an attacker to bypass DNSSEC validation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pdns-recursor | Jun 16, 2020 | May 19, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | May 19, 2020 |
| Debian | — | Upgrade pdns-recursor | May 25, 2020 | May 19, 2020 |
| Freebsd | — | Upgrade powerdns-recursor | May 28, 2020 | May 26, 2020 |
| Suse | — | Upgrade pdns-recursor | May 24, 2020 | May 19, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub