powerdns-recursor -- insufficient validation of DNSSEC signatures

PowerDNS Security Advisory reports: An issue has been found in the DNSSEC validation component of PowerDNS Recursor, allowing an ancestor delegation NSEC or NSEC3 record to be used to wrongfully prove the non-existence of a RR below the owner name of that record. This would allow an attacker in...

PowerDNS Recursor 4.0.x < 4.0.8 CNAME Parser DoS (CVE-2017-15120)

According to its self-reported version number, the version of the PowerDNS Recursor listening on the remote host is version 4.0.x prior to 4.0.8. It is, therefore, affected by a denial of service vulnerability in the CNAME parser. Note that Nessus has not attempted to exploit these issues but has...

[SECURITY] Fedora 26 Update: pdns-recursor-4.0.7-1.fc26

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

[SECURITY] Fedora 27 Update: pdns-recursor-4.0.7-1.fc27

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

Debian DSA-4063-1 : pdns-recursor - security update

Toshifumi Sakaguchi discovered that PowerDNS Recursor, a high-performance resolving name server was susceptible to denial of service via a crafted CNAME answer. The oldstable distribution jessie is not affected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

PowerDNS Recursor DoS Vulnerability (2017-08)

PowerDNS Recursor is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] [DSA 4063-1] pdns-recursor security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4063-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 11, 2017 https://www.debian.org/security/faq -...

PowerDNS Recursor API Injection Vulnerability

PowerDNS Recursive Server is a high-end name resolution server. An API injection vulnerability exists in PowerDNS Recursor, which can be exploited by an attacker to execute arbitrary code in a user's browser at an affected site...

PowerDNS Authoritative Server Module Cross-Site Scripting Vulnerability

PowerDNS Recursive Server is a high-end name resolution server. A cross-site scripting vulnerability exists in PowerDNS Recursor 4.0.6 and earlier versions, which can be exploited by an attacker to execute arbitrary code in a user's browser at an affected site...

PowerDNS Recursor Denial of Service Vulnerability

PowerDNS Recursive Server is a high-end name resolution server. A denial-of-service security vulnerability exists in the implementation of PowerDNS Recursor, which can be exploited by attackers to cause a denial of service and memory leakage in Recursor...

[ASA-201711-31] powerdns-recursor: multiple issues

Arch Linux Security Advisory ASA-201711-31 ========================================== Severity: Medium Date : 2017-11-27 CVE-ID : CVE-2017-15090 CVE-2017-15092 CVE-2017-15093 CVE-2017-15094 Package : powerdns-recursor Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-5...

[SECURITY] Fedora 25 Update: pdns-recursor-4.0.4-1.fc25

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

The vulnerability of the PowerDNS Recursor software allows a malicious actor to compromise the integrity and accessibility of protected information.

The software PowerDNS Recursor is vulnerable due to the rewriting of cached server names and TTL values in NS records when processing “A” record queries. Exploiting this vulnerability allows a malicious actor to extend the validity of revoked domain names by using non-existent domain names...

The vulnerability of the PowerDNS Recursor software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

Overfilling the buffer in the PowerDNS Recursor allows malicious actors operating remotely to cause service failures abrupt termination of the daemon or execute arbitrary code using specially crafted packages...

The vulnerability of the PowerDNS Recursor software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in PowerDNS Recursor allows malicious actors to manipulate DNS data by using specially crafted zones...

PowerDNS Recursor 3.x < 3.7.3 Label Decompression DoS

According to its self-reported version number, the version of the PowerDNS Recursor listening on the remote host is version 3.x prior to 3.7.3. It is, therefore, affected by a denial of service vulnerability due to improper validation of user-supplied input when handling self-referential names...

PowerDNS Recursor and Authoritative Server Denial of Service Vulnerabilities

PowerDNS Recursor, Authoritative Server are both products of the Dutch company PowerDNS.PowerDNS Recursor is a domain name resolution server.PowerDNS Authoritative Server is a DNS server. A security vulnerability exists in the label decompression feature of PowerDNS Recursor and Authoritative...

DEBIAN-CVE-2015-5470

The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative Auth Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service CPU consumption or crash via a request with a long name that refers to itself. NOTE...

Gentoo Security Advisory GLSA 201412-33

Gentoo Linux Local Security Checks GLSA 201412-33 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

openSUSE Security Update : pdns / pdns-recursor (openSUSE-2015-505)

pdns, pdns-recursor were updated to fix two security issues. These security issues were fixed : - CVE-2015-1868: The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative Auth Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before...