PowerDNS Authoritative Server Multiple Vulnerabilities (2020-06)

PowerDNS Authoritative Server is prone to multiple vulnerabilities in the GSS-TSIG support. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

CVE-2020-24697

An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can cause a denial of service by sending crafted queries with a GSS-TSIG signature...

CVE-2020-24697

CVE-2020-24697 affects PowerDNS Authoritative Server up to version 4.3.0 when the flag --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can send crafted GSS-TSIG queries to trigger a denial of service, impacting availability. Several connected sources reiterate a DoS out...

CVE-2020-24697

An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can cause a denial of service by sending crafted queries with a GSS-TSIG signature...

CVE-2020-24697

An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can cause a denial of service by sending crafted queries with a GSS-TSIG signature...