CVE-2019-10162: falha de baixa gravidade em PowerDNS pdns
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.5epss 1.7%
A vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.10, 4.0.8 allowing an authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. The issue is due to the fact that the Authoritative Server will exit when it runs into a parsing error while looking up the NS/A/AAAA records it is about to use for an outgoing notify.
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Produtos afetados
PowerDNS · pdnsCVEs relacionadas — PowerDNS pdns
No mesmo produto, das mais perigosas para as menos.
Referências
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00036.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00054.htmlhttps://blog.powerdns.com/2019/06/21/powerdns-authoritative-server-4-0-8-and-4-1-10-released/https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10162https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-04.html