1310 matches found
Ubuntu: Security Advisory (USN-7203-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7203-1 pdns, pdns-recursor vulnerabilities
Wei Hao discovered that PowerDNS Authoritative Server incorrectly handled memory when accessing certain files. An attacker could possibly use this issue to achieve arbitrary code execution. CVE-2018-1046 It was discovered that PowerDNS Authoritative Server and PowerDNS Recursor incorrectly handle...
USN-7203-1: PowerDNS vulnerabilities
Wei Hao discovered that PowerDNS Authoritative Server incorrectly handled memory when accessing certain files. An attacker could possibly use this issue to achieve arbitrary code execution. CVE-2018-1046 It was discovered that PowerDNS Authoritative Server and PowerDNS Recursor incorrectly handle...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : PowerDNS vulnerabilities (USN-7203-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7203-1 advisory. Wei Hao discovered that PowerDNS Authoritative Server incorrectly handled memory when accessing certain files. An...
PT-2025-49591
Name of the Vulnerable Software and Affected Versions pdns-recursor affected versions not specified Description An attacker can cause the software to fail due to an assertion failure. This is triggered by sending specially crafted DNS records, which are then cached, followed by a DNS query with t...
PT-2025-43558
Name of the Vulnerable Software and Affected Versions PowerDNS Recursor versions prior to 5.2.6-0+deb13u1 Description Insufficient validation of delegation information could lead to cache pollution in PowerDNS Recursor, a resolving name server. Updates will not be backported to the version of PDN...
PT-2025-43559
Name of the Vulnerable Software and Affected Versions PDNS Recursor versions prior to 5.2.6-0+deb13u1 Description Insufficient validation of delegation information could lead to cache pollution in PDNS Recursor, a resolving name server. The changes required to address this are too extensive to...
PT-2025-49592
Name of the Vulnerable Software and Affected Versions pdns-recursor affected versions not specified Description An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP. This impacts pdns-recursor in Debian Linux. Recommendations At the moment, there is no...
[SECURITY] Fedora 39 Update: pdns-recursor-4.9.9-1.fc39
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...
FreeBSD : powerdns-recursor -- denial of service (8727b513-855b-11ef-9e50-6805ca2fa271)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 8727b513-855b-11ef-9e50-6805ca2fa271 advisory. PowerDNS Team reports: PowerDNS Security Advisory 2024-04: Crafted responses can lead to a denial of...
PowerDNS Recursor DoS Vulnerability (2024-04)
PowerDNS Recursor is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PowerDNS 安全漏洞
PowerDNS is an open source DNS server from PowerDNS. PowerDNS uses Access mdb file to record DNS information under Win32, and MySQL to record DNS information under Linux/Unix. Whether it is mdb or MySQL, backup is very convenient. A security vulnerability exists in PowerDNS that allows an attacke...
powerdns-recursor -- denial of service
PowerDNS Team reports: PowerDNS Security Advisory 2024-04: Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor...
PT-2024-10518 · Powerdns +1 · Powerdns Recursor +1
Name of the Vulnerable Software and Affected Versions: PowerDNS Recursor versions prior to 4.9.9 PowerDNS Recursor versions prior to 5.0.9 PowerDNS Recursor versions prior to 5.1.2 Description: An attacker can publish a zone containing specific Resource Record Sets. Repeatedly processing and...
The vulnerability in the web application for managing IP addresses, phpipam’s /app/admin/powerDNS/record-edit.php script, allows a attacker to execute XSS attacks.
The vulnerability in the web application for managing IP addresses, /app/admin/powerDNS/record-edit.php, exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...
CVE-2024-41357
phpipam 1.6 is vulnerable to Cross Site Scripting XSS via /app/admin/powerDNS/record-edit.php...
PT-2024-5308 · Phpipam · Phpipam
Name of the Vulnerable Software and Affected Versions: phpipam version 1.6 Description: The issue is related to a lack of protection for the web page structure in the phpipam web application for IP address management. This can be exploited by a remote attacker to conduct a cross-site scripting XS...
phpIPAM 安全漏洞
phpIPAM is the phpIPAM open source suite of open source PHP and MySQL based IP address management applications IPAM. A security vulnerability exists in phpIPAM version 1.6, which stems from a cross-site scripting vulnerability contained in the /app/admin/powerDNS/record-edit.php file...
CVE-2024-41357
CVE-2024-41357 affects phpIPAM version 1.6, with a Cross Site Scripting (XSS) vulnerability in the /app/admin/powerDNS/record-edit.php endpoint. The issue is confirmed across multiple feeds (NVD, Red Hat advisories, OSV, Exploit-DB) and relates to untrusted input handling in that file. The availa...