An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-pdns | Aug 22, 2024 | Oct 2, 2020 | |
| Debian | debian-upgrade-pdns | Jul 30, 2024 | Oct 2, 2020 | |
| Freebsd | freebsd-upgrade-package-powerdns | Sep 29, 2020 | Sep 24, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-net-dns-pdns | Dec 29, 2020 | Oct 2, 2020 | |
| Suse | — | suse-upgrade-pdnssuse-upgrade-pdns-backend-geoipsuse-upgrade-pdns-backend-godbcsuse-upgrade-pdns-backend-ldapsuse-upgrade-pdns-backend-luasuse-upgrade-pdns-backend-mydnssuse-upgrade-pdns-backend-mysqlsuse-upgrade-pdns-backend-postgresqlsuse-upgrade-pdns-backend-remotesuse-upgrade-pdns-backend-sqlite3 | Sep 29, 2020 | Sep 22, 2020 |
| Ubuntu | ubuntu-pro-upgrade-pdns-recursorubuntu-pro-upgrade-pdns-serverubuntu-pro-upgrade-pdns-tools | Jan 15, 2025 | Oct 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub