In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pdnsUpgrade pdns-recursor | Aug 22, 2024 | Mar 25, 2022 |
| Debian | — | Upgrade pdns-recursorUpgrade pdns | Jul 30, 2024 | Mar 25, 2022 |
| Freebsd | — | Upgrade powerdnsUpgrade powerdns-recursor | Nov 4, 2022 | Mar 27, 2022 |
| Suse | — | Upgrade pdns-backend-ldapUpgrade pdns-backend-godbcUpgrade pdns-backend-luaUpgrade pdns-backend-postgresqlUpgrade pdns-recursorUpgrade pdns-backend-geoipUpgrade pdnsUpgrade pdns-backend-mysqlUpgrade pdns-backend-sqlite3Upgrade pdns-backend-remote | Oct 26, 2022 | Mar 25, 2022 |
| Ubuntu | — | Upgrade pdns-recursor (Ubuntu Pro)Upgrade pdns-server (Ubuntu Pro)Upgrade pdns-tools (Ubuntu Pro) | Jan 15, 2025 | Mar 25, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub