A Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8 allowing a remote, authorized master server to cause a high CPU load or even prevent any further updates to any slave zone by sending a large number of NOTIFY messages. Note that only servers configured as slaves are affected by this issue.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
- CVSS 3.0 Base Score: 3.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pdns | Aug 22, 2024 | Jul 30, 2019 |
| Debian | — | Upgrade pdns | Jun 24, 2019 | Jun 24, 2019 |
| Freebsd | — | Upgrade powerdns | Jul 1, 2019 | Jun 21, 2019 |
| Suse | — | Upgrade pdns-backend-postgresqlUpgrade pdns-backend-luaUpgrade pdns-backend-mydnsUpgrade pdns-backend-sqlite3Upgrade pdns-backend-godbcUpgrade pdns-backend-remoteUpgrade pdns-backend-ldapUpgrade pdns-backend-geoipUpgrade pdnsUpgrade pdns-backend-mysql | Aug 16, 2019 | Jun 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub