CVE-2017-15092

2018-01-2315:29:00

Alpine Linux Development Team

security.alpinelinux.org

0.001 Low

EPSS

Percentile

41.4%

JSON

A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing a remote attacker to inject HTML and Javascript code into the web interface, altering the content.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchpdns-recursor< 4.0.7-r0UNKNOWN
Alpine3.10-communitynoarchpdns-recursor< 4.0.7-r0UNKNOWN
Alpine3.11-communitynoarchpdns-recursor< 4.0.7-r0UNKNOWN
Alpine3.12-communitynoarchpdns-recursor< 4.0.7-r0UNKNOWN
Alpine3.13-communitynoarchpdns-recursor< 4.0.7-r0UNKNOWN
Alpine3.14-communitynoarchpdns-recursor< 4.0.7-r0UNKNOWN
Alpine3.15-communitynoarchpdns-recursor< 4.0.7-r0UNKNOWN
Alpine3.16-communitynoarchpdns-recursor< 4.0.7-r0UNKNOWN
Alpine3.17-communitynoarchpdns-recursor< 4.0.7-r0UNKNOWN
Alpine3.18-communitynoarchpdns-recursor< 4.0.7-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	pdns-recursor	< 4.0.7-r0	UNKNOWN
Alpine	3.10-community	noarch	pdns-recursor	< 4.0.7-r0	UNKNOWN
Alpine	3.11-community	noarch	pdns-recursor	< 4.0.7-r0	UNKNOWN
Alpine	3.12-community	noarch	pdns-recursor	< 4.0.7-r0	UNKNOWN
Alpine	3.13-community	noarch	pdns-recursor	< 4.0.7-r0	UNKNOWN
Alpine	3.14-community	noarch	pdns-recursor	< 4.0.7-r0	UNKNOWN
Alpine	3.15-community	noarch	pdns-recursor	< 4.0.7-r0	UNKNOWN
Alpine	3.16-community	noarch	pdns-recursor	< 4.0.7-r0	UNKNOWN
Alpine	3.17-community	noarch	pdns-recursor	< 4.0.7-r0	UNKNOWN
Alpine	3.18-community	noarch	pdns-recursor	< 4.0.7-r0	UNKNOWN