In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pdnsUpgrade pdns-recursor | Aug 22, 2024 | Mar 25, 2022 |
| Debian | — | Upgrade pdns-recursorUpgrade pdns | Jul 30, 2024 | Mar 25, 2022 |
| Freebsd | — | Upgrade powerdns-recursorUpgrade powerdns | Nov 4, 2022 | Mar 27, 2022 |
| Suse | — | Upgrade pdnsUpgrade pdns-backend-geoipUpgrade pdns-backend-postgresqlUpgrade pdns-recursorUpgrade pdns-backend-godbcUpgrade pdns-backend-ldapUpgrade pdns-backend-luaUpgrade pdns-backend-remoteUpgrade pdns-backend-mysqlUpgrade pdns-backend-sqlite3 | Oct 26, 2022 | Mar 25, 2022 |
| Ubuntu | — | Upgrade pdns-tools (Ubuntu Pro)Upgrade pdns-recursor (Ubuntu Pro)Upgrade pdns-server (Ubuntu Pro) | Jan 15, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub