689 matches found
PowerDNS Authoritative Server Buffer Overflow Vulnerability (2018-02)
An issue has been found in the dnsreplay tool provided with PowerDNS Authoritative Server, where replaying a specially crafted PCAP file can trigger a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution. This buffer overflow only occurs when the ecs-stamp opti...
CVE-2017-15091
An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...
UBUNTU-CVE-2017-15091
An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...
CVE-2017-15091
An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...
CVE-2017-15091
An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...
CVE-2017-15091
An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...
CVE-2017-15091
The CVE-2017-15091 issue affects PowerDNS Authoritative Server (4.x up to 4.0.4 and 3.x up to 3.4.11). Although the API can be configured as read-only via api-readonly, a missing check permits operations that alter server state: flushing the cache, triggering a zone transfer, or sending NOTIFY wh...
PT-2018-5758
Name of the Vulnerable Software and Affected Versions: PowerDNS Authoritative versions 3.x up to and including 3.4.11 PowerDNS Authoritative versions 4.x up to and including 4.0.4 Description: The issue concerns the API component, where certain operations that impact the server state are permitte...
CVE-2017-15091: Incorrect Authorization
An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly...
PowerDNS Authoritative < 4.0.5 Read Only Configuration Bypass (CVE-2017-15091)
According to its self-reported version number, the version of the PowerDNS Authoritative listening on the remote host is prior to 4.0.5. It is, therefore, affected by a vulnerability in the API where a remote authenticated attacker can perform operations that affect the server state even if the...
openSUSE Security Update : pdns (openSUSE-2017-1340)
This update for pdns fixes the following issues : Security issue fixed : - CVE-2017-15091: An issue has been found in the API component of PowerDNS Authoritative, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as...
[SECURITY] Fedora 26 Update: pdns-recursor-4.0.7-1.fc26
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...
[SECURITY] Fedora 27 Update: pdns-recursor-4.0.7-1.fc27
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...
PowerDNS Authoritative Server Module Authentication Bypass Vulnerability (CNVD-2017-38247)
PowerDNS Authoritative Server provides DNS-related products and services. PowerDNS Authoritative Server has an authentication bypass vulnerability in DNSSEC signature verification that could allow a man-in-the-middle attacker to forge signatures and bypass security restrictions...
PowerDNS Authoritative Server Module Authentication Bypass Vulnerability
PowerDNS Authoritative Server provides DNS-related products and services. PowerDNS Authoritative Server has an authentication bypass vulnerability in API operations that can be exploited by attackers to bypass security restrictions and perform unauthorized operations...
PowerDNS Authoritative Server <= 4.0.4 DoS Vulnerability (2017-04)
PowerDNS Authoritative Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
[SECURITY] Fedora 27 Update: knot-2.6.1-1.fc27
Knot DNS is a high-performance authoritative DNS server implementation...
[SECURITY] Fedora 26 Update: knot-2.6.1-1.fc26
Knot DNS is a high-performance authoritative DNS server implementation...
Akamai's DNS Contribution to Internet Resiliency
Background Akamai Technologies recently contributed its "Serve Stale" DNS algorithm to Version 9 of the Internet Systems Consortium's ISC Berkeley Internet Name Domain BIND open source Domain Name System DNS project. As the Internet's most widely used DNS implementation, BIND operates ubiquitousl...