In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pdns-recursorUpgrade pdns | Aug 22, 2024 | Mar 25, 2022 |
| Debian | — | Upgrade pdnsUpgrade pdns-recursor | Jul 30, 2024 | Mar 25, 2022 |
| Freebsd | — | Upgrade powerdnsUpgrade powerdns-recursor | Nov 4, 2022 | Mar 27, 2022 |
| Suse | — | Upgrade pdnsUpgrade pdns-backend-godbcUpgrade pdns-backend-luaUpgrade pdns-backend-geoipUpgrade pdns-backend-postgresqlUpgrade pdns-recursorUpgrade pdns-backend-ldapUpgrade pdns-backend-sqlite3Upgrade pdns-backend-remoteUpgrade pdns-backend-mysql | Oct 26, 2022 | Mar 25, 2022 |
| Ubuntu | — | Upgrade pdns-tools (Ubuntu Pro)Upgrade pdns-server (Ubuntu Pro)Upgrade pdns-recursor (Ubuntu Pro) | Jan 15, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub