Lucene search
PRIOn knowledge basePRION:CVE-2016-7073HistorySep 11, 2018 - 1:29 p.m.
Input validation
2018-09-1113:29:00
PRIOn knowledge base
www.prio-n.com
4
An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check of the TSIG time and fudge values was found in AXFRRetriever, leading to a possible replay attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 8.0 | |
| authoritative | lt | 3.4.11 | |
| authoritative | ge | 4.0.0 | |
| authoritative | lt | 4.0.2 | |
| recursor | ge | 4.0.0 | |
| recursor | lt | 4.0.4 | |
| recursor | lt | 3.7.4 |
Related
cvelist
cvelist
CVE-2016-7073
2018-09-11 13:00:00
cve
cve
CVE-2016-7073
2018-09-11 13:29:01
nvd
nvd
CVE-2016-7073
2018-09-11 13:29:01
debiancve
debiancve
CVE-2016-7073
2018-09-11 13:29:01
alpinelinux
alpinelinux
CVE-2016-7073
2018-09-11 13:29:01
osv
osv
CVE-2016-7073
2018-09-11 13:29:01
pdns - security update
2017-01-25 00:00:00
pdns - security update
2017-01-13 00:00:00
ubuntucve
ubuntucve
CVE-2016-7073
2018-09-11 00:00:00
openvas
openvas
Fedora Update for pdns-recursor FEDORA-2017-8308bc2a6e
2017-01-25 00:00:00
Debian: Security Advisory (DLA-798-1)
2023-03-08 00:00:00
archlinux
archlinux
[ASA-201701-30] powerdns-recursor: multiple issues
2017-01-19 00:00:00
[ASA-201701-29] powerdns: multiple issues
2017-01-19 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: pdns-recursor-4.0.4-1.fc24
2017-01-25 00:22:45
[SECURITY] Fedora 24 Update: pdns-4.0.3-1.fc24
2017-01-29 00:50:07
[SECURITY] Fedora 25 Update: pdns-recursor-4.0.4-1.fc25
2017-01-24 23:22:21
nessus
nessus
Fedora 25 : pdns-recursor (2017-c1ae4335e5)
2017-01-25 00:00:00
Fedora 24 : pdns (2017-bb0b9ddf27)
2017-01-31 00:00:00
debian
debian
[SECURITY] [DSA 3764-1] pdns security update
2017-01-13 16:48:00
[SECURITY] [DLA 798-1] pdns security update
2017-01-25 21:34:12
[SECURITY] [DSA 3764-1] pdns security update
2017-01-13 16:48:00
mageia
mageia
Updated pdns packages fix security vulnerabilities
2017-02-02 11:11:52
freebsd
freebsd
powerdns -- multiple vulnerabilities
2016-12-15 00:00:00