CVE-2019-10163: falha de baixa gravidade em PowerDNS pdns
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.5epss 1.0%
A Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8 allowing a remote, authorized master server to cause a high CPU load or even prevent any further updates to any slave zone by sending a large number of NOTIFY messages. Note that only servers configured as slaves are affected by this issue.
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Produtos afetados
PowerDNS · pdnsCVEs relacionadas — PowerDNS pdns
No mesmo produto, das mais perigosas para as menos.
Referências
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00036.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-08/msg00054.htmlhttps://blog.powerdns.com/2019/06/21/powerdns-authoritative-server-4-0-8-and-4-1-10-released/https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10163https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-05.html