A vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.10, 4.0.8 allowing an authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. The issue is due to the fact that the Authoritative Server will exit when it runs into a parsing error while looking up the NS/A/AAAA records it is about to use for an outgoing notify.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pdns | Aug 22, 2024 | Jul 30, 2019 |
| Debian | — | Upgrade pdns | Jun 24, 2019 | Jun 24, 2019 |
| Freebsd | — | Upgrade powerdns | Jul 1, 2019 | Jun 21, 2019 |
| Suse | — | Upgrade pdns-backend-postgresqlUpgrade pdns-backend-godbcUpgrade pdns-backend-geoipUpgrade pdns-backend-remoteUpgrade pdnsUpgrade pdns-backend-ldapUpgrade pdns-backend-sqlite3Upgrade pdns-backend-luaUpgrade pdns-backend-mysqlUpgrade pdns-backend-mydns | Aug 16, 2019 | Jun 21, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub