Lucene search
HistoryFeb 17, 2012 - 10:55 p.m.
CVE-2012-1193
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0.006
Percentile
79.1%
The resolver in PowerDNS Recursor (aka pdns_recursor) 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a “ghost domain names” attack.
Affected configurations
Node
powerdnspowerdns_recursorMatch3.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| powerdns | powerdns_recursor | 3.3 | cpe:2.3:a:powerdns:powerdns_recursor:3.3:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2012-02-17 22:55:00
openvas
openvas
Fedora Update for pdns-recursor FEDORA-2013-6279
2013-05-03 00:00:00
Fedora Update for pdns-recursor FEDORA-2013-6279
2013-05-03 00:00:00
Fedora Update for pdns-recursor FEDORA-2013-6316
2013-05-03 00:00:00
cvelist
cvelist
CVE-2012-1193
2012-02-17 22:00:00
cve
cve
CVE-2012-1193
2012-02-17 22:55:00
nessus
nessus
Fedora 17 : pdns-recursor-3.5-2.fc17 (2013-6316)
2013-05-01 00:00:00
PowerDNS Recursor 3.3.x / 3.4.x / 3.5 RC1 Cache Update Policy Deleted Domain Name Resolving Weakness
2013-07-25 00:00:00
Fedora 18 : pdns-recursor-3.5-2.fc18 (2013-6279)
2013-05-01 00:00:00
ubuntucve
ubuntucve
CVE-2012-1193
2012-02-17 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: pdns-recursor-3.5-1.fc19
2013-04-20 19:48:11
[SECURITY] Fedora 18 Update: pdns-recursor-3.5-2.fc18
2013-05-01 03:36:21
[SECURITY] Fedora 17 Update: pdns-recursor-3.5-2.fc17
2013-05-01 03:35:24
gentoo
gentoo
PowerDNS Recursor: Multiple vulnerabilities
2014-12-22 00:00:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0.006
Percentile
79.1%
Related for NVD:CVE-2012-1193