CVE-2019-10203
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.3epss 1.6%
exploitation probability
1.6%top 26% of all CVEs
observed exploitation
nono source reports it
In short
PowerDNS Authoritative daemon crashes when processing certain serial numbers during slave notifications, causing service disruption. An attacker can trigger this by crafting specific DNS zone serial values.
Technical detail
A malformed serial number between 2^31 and 2^32-1 in NOTIFY messages causes the pdns daemon to exit abnormally, resulting in denial of service. The attack requires ability to send NOTIFY packets to the authoritative server; affected versions are 4.0.x before 4.0.9 and 4.1.x before 4.1.11.
Summary generated and translated by AI from the official description.
PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Affected products
Red Hat · pdns