935 matches found
[SECURITY] Fedora 33 Update: pdns-recursor-4.3.4-1.fc33
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...
Security update for pdns-recursor (moderate)
openSUSE Security Update: Security update for pdns-recursor Announcement ID: openSUSE-SU-2020:1101-1 Rating: moderate References: 1173302 Cross-References: CVE-2020-14196 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available. Description:This...
Security update for pdns-recursor (moderate)
openSUSE Security Update: Security update for pdns-recursor Announcement ID: openSUSE-SU-2020:1055-1 Rating: moderate References: 1173302 Cross-References: CVE-2020-14196 Affected Products: openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available. Description:This...
The vulnerability of the `SyncRes::processAnswer` function in the recursive DNS server PowerDNS Recursor allows a attacker to access confidential data.
The vulnerability of the SyncRes::processAnswer function in the recursive DNS server PowerDNS Recursor is related to the lack of a mechanism for verifying the correctness of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain access to confidential data...
Validation Bypass
PowerDNS Recursor is vulnerable validation bypass. The answer section of a NXDOMAIN response lacking an SOA is not properly validated in SyncRes::processAnswer, allowing an attacker to bypass DNSSEC validation...
Wrong DNS Zone Caching
PowerDNS Recursor is susceptible to wrong DNS zone caching. A remote attacker sending a DNS query for a meta-type like OPT can lead to a zone being wrongly cached as failing DNSSEC validation. It only arises if the parent zone is signed, and all the authoritative servers for that parent zone answ...
Amplification Attacks
PowerDNS Recursor is vulnerable toamplification attacks. It does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafte...
Privilege Escalation
pdns-recursor is vulnerable to privilege escalation. The vulnerability exists as pdns-recursor does not properly restrict ACL access to the internal web server...
OPENSUSE-SU-2020:1101-1 Security update for pdns-recursor
This update for pdns-recursor fixes the following issues: - CVE-2020-14196: Fixed an access restriction bypass with API key and password authentication boo1173302. This update was imported from the openSUSE:Leap:15.2:Update update project...
OPENSUSE-SU-2020:1055-1 Security update for pdns-recursor
This update for pdns-recursor fixes the following issues: - CVE-2020-14196: Fixed an access restriction bypass with API key and password authentication boo1173302. This update was imported from the openSUSE:Leap:15.1:Update update project...
openSUSE Security Update : pdns-recursor (openSUSE-2020-1005)
This update for pdns-recursor fixes the following issues : - CVE-2020-14196: Fixed an access restriction bypass with API key and password authentication boo1173302. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...
openSUSE: Security Advisory for pdns-recursor (openSUSE-SU-2020:1005-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:1005-1 Security update for pdns-recursor
This update for pdns-recursor fixes the following issues: - CVE-2020-14196: Fixed an access restriction bypass with API key and password authentication boo1173302...
Security update for pdns-recursor (moderate)
openSUSE Security Update: Security update for pdns-recursor Announcement ID: openSUSE-SU-2020:1005-1 Rating: moderate References: 1173302 Cross-References: CVE-2020-14196 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 SUSE Package Hub for SUSE Linux...
Updated pdns-recursor packages fix security vulnerability
Updated pdns-recursor package fixes security vulnerability: An issue has been found in PowerDNS Recursor where the ACL applied to the internal web server via webserver-allow-from is not properly enforced, allowing a remote attacker to send HTTP queries to the internal web server, bypassing the...
MGASA-2020-0286 Updated pdns-recursor packages fix security vulnerability
Updated pdns-recursor package fixes security vulnerability: An issue has been found in PowerDNS Recursor where the ACL applied to the internal web server via webserver-allow-from is not properly enforced, allowing a remote attacker to send HTTP queries to the internal web server, bypassing the...
FreeBSD : powerdns-recursor -- access restriction bypass (641cd669-bc37-11ea-babf-6805ca2fa271)
PowerDNS Team reports : CVE-2020-14196: An issue has been found in PowerDNS Recursor where the ACL applied to the internal web server via webserver-allow-from is not properly enforced, allowing a remote attacker to send HTTP queries to the internal web server, bypassing the restriction. In the...
PowerDNS Recursor < 4.1.17, 4.2.0 < 4.2.3, 4.3.0 < 4.3.2 Access Restriction Bypass Vulnerability
PowerDNS Recursor is prone to an access restriction bypass vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Unspecified Vulnerability in PowerDNS Recursor (CNVD-2021-25670)
PowerDNS Recursor pdnsrecursor is a domain name resolution server from the Dutch company PowerDNS. A security vulnerability in PowerDNS Recursor versions 4.3.1 and earlier, 4.2.2 and earlier, and 4.1.16 and earlier, which stems from the program's failure to properly restrict ACL access to an...