Lucene search

PRIOn knowledge basePRION:CVE-2020-14196

HistoryJul 01, 2020 - 6:15 p.m.

Code injection

2020-07-0118:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.3%

JSON

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced.

CPENameOperatorVersion
recursorge4.3.0
recursorle4.3.1
recursorge4.2.0
recursorle4.2.2
recursorle4.1.16

Name	Operator	Version
recursor	ge	4.3.0
recursor	le	4.3.1
recursor	ge	4.2.0
recursor	le	4.2.2
recursor	le	4.1.16

References

lists.opensuse.org/opensuse-security-announce/2020-07/msg00043.html

lists.opensuse.org/opensuse-security-announce/2020-09/msg00042.html

lists.opensuse.org/opensuse-security-announce/2020-09/msg00044.html

lists.opensuse.org/opensuse-security-announce/2020-10/msg00036.html

doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-04.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7TUNCUZNASYSTVD35QGFAI6XO2BFMQ2F/

www.openwall.com/lists/oss-security/2020/07/01/1