Lucene search
K

904 matches found

Tenable Nessus
Tenable Nessus
added 2020/07/20 12:0 a.m.27 views

openSUSE Security Update : pdns-recursor (openSUSE-2020-1005)

This update for pdns-recursor fixes the following issues : - CVE-2020-14196: Fixed an access restriction bypass with API key and password authentication boo1173302. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

5.3CVSS7.2AI score0.00025EPSS
Exploits0References2
OSV
OSV
added 2020/07/19 8:26 a.m.4 views

OPENSUSE-SU-2020:1005-1 Security update for pdns-recursor

This update for pdns-recursor fixes the following issues: - CVE-2020-14196: Fixed an access restriction bypass with API key and password authentication boo1173302...

5.3CVSS6AI score0.00025EPSS
Exploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2020/07/19 12:0 a.m.33 views

Security update for pdns-recursor (moderate)

openSUSE Security Update: Security update for pdns-recursor Announcement ID: openSUSE-SU-2020:1005-1 Rating: moderate References: 1173302 Cross-References: CVE-2020-14196 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux...

5.3CVSS5.9AI score0.00025EPSS
Exploits0References1
Mageia
Mageia
added 2020/07/07 1:47 p.m.29 views

Updated pdns-recursor packages fix security vulnerability

Updated pdns-recursor package fixes security vulnerability: An issue has been found in PowerDNS Recursor where the ACL applied to the internal web server via webserver-allow-from is not properly enforced, allowing a remote attacker to send HTTP queries to the internal web server, bypassing the...

5.3CVSS2AI score0.00025EPSS
Exploits0References3
OSV
OSV
added 2020/07/07 1:47 p.m.8 views

MGASA-2020-0286 Updated pdns-recursor packages fix security vulnerability

Updated pdns-recursor package fixes security vulnerability: An issue has been found in PowerDNS Recursor where the ACL applied to the internal web server via webserver-allow-from is not properly enforced, allowing a remote attacker to send HTTP queries to the internal web server, bypassing the...

5.3CVSS6AI score0.00025EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2020/07/06 12:0 a.m.31 views

FreeBSD : powerdns-recursor -- access restriction bypass (641cd669-bc37-11ea-babf-6805ca2fa271)

PowerDNS Team reports : CVE-2020-14196: An issue has been found in PowerDNS Recursor where the ACL applied to the internal web server via webserver-allow-from is not properly enforced, allowing a remote attacker to send HTTP queries to the internal web server, bypassing the restriction. In the...

5.3CVSS7.1AI score0.00025EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2020/07/03 12:0 a.m.22 views

PowerDNS Recursor < 4.1.17, 4.2.0 < 4.2.3, 4.3.0 < 4.3.2 Access Restriction Bypass Vulnerability

PowerDNS Recursor is prone to an access restriction bypass vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.3CVSS7.4AI score0.00025EPSS
Exploits0References1
CNVD
CNVD
added 2020/07/02 12:0 a.m.8 views

Unspecified Vulnerability in PowerDNS Recursor (CNVD-2021-25670)

PowerDNS Recursor pdnsrecursor is a domain name resolution server from the Dutch company PowerDNS. A security vulnerability in PowerDNS Recursor versions 4.3.1 and earlier, 4.2.2 and earlier, and 4.1.16 and earlier, which stems from the program's failure to properly restrict ACL access to an...

5.3CVSS6.7AI score0.00025EPSS
Exploits0References1
NVD
NVD
added 2020/07/01 6:15 p.m.12 views

CVE-2020-14196

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced...

5.3CVSS0.00025EPSS
Exploits0References7
OSV
OSV
added 2020/07/01 6:15 p.m.1 views

DEBIAN-CVE-2020-14196

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced...

5.3CVSS7.1AI score0.00025EPSS
Exploits0References1
OSV
OSV
added 2020/07/01 6:15 p.m.19 views

CVE-2020-14196

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced...

5.3CVSS6.6AI score
Exploits0References7
UbuntuCve
UbuntuCve
added 2020/07/01 6:15 p.m.20 views

CVE-2020-14196

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced...

5.3CVSS6.8AI score0.00025EPSS
Exploits0References3
Prion
Prion
added 2020/07/01 6:15 p.m.19 views

Code injection

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced...

4.3CVSS5.1AI score0.00025EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2020/07/01 6:15 p.m.1 views

UBUNTU-CVE-2020-14196

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced...

5.3CVSS7.2AI score0.00025EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2020/07/01 5:3 p.m.19 views

CVE-2020-14196

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced...

5.3CVSS5.7AI score0.00025EPSS
Exploits0
Cvelist
Cvelist
added 2020/07/01 5:3 p.m.13 views

CVE-2020-14196

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced...

5.5AI score0.00025EPSS
Exploits0References7
CVE
CVE
added 2020/07/01 5:3 p.m.224 views

CVE-2020-14196

PowerDNS Recursor (pdns-recursor) is affected by CVE-2020-14196, where the ACL restricting access to the internal web server is not properly enforced in versions up to 4.3.1, 4.2.2 and 4.1.16. Several connected advisories confirm this issue and note that mitigations involve upgrading to a fixed p...

5.3CVSS5.4AI score0.00025EPSS
Exploits0References7Affected Software1
AlpineLinux
AlpineLinux
added 2020/07/01 5:3 p.m.38 views

CVE-2020-14196

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced...

5.3CVSS5.6AI score0.00025EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2020/07/01 12:0 a.m.4 views

PT-2020-13924 · Powerdns +1 · Powerdns Recursor +1

Name of the Vulnerable Software and Affected Versions: PowerDNS Recursor versions prior to 4.3.2 PowerDNS Recursor versions 4.2.2 and earlier PowerDNS Recursor versions 4.1.16 and earlier Description: The ACL that restricts access to the internal web server is not properly enforced, allowing...

9.8CVSS6.3AI score0.70787EPSS
Exploits0References58
FreeBSD
FreeBSD
added 2020/07/01 12:0 a.m.22 views

powerdns-recursor -- access restriction bypass

PowerDNS Team reports: CVE-2020-14196: An issue has been found in PowerDNS Recursor where the ACL applied to the internal web server via webserver-allow-from is not properly enforced, allowing a remote attacker to send HTTP queries to the internal web server, bypassing the restriction. In the...

5.3CVSS3.2AI score0.00025EPSS
Exploits0References1
Rows per page
Query Builder