Lucene search
Veracode Vulnerability DatabaseVERACODE:27604HistoryOct 18, 2020 - 1:47 a.m.
Denial Of Service (DoS)
2020-10-1801:47:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.004 Low
EPSS
Percentile
72.5%
pdns-recursor is vulnerable to denial of service. A remote attacker is able to cause the cached records for a given name to be updated to the Bogus DNSSEC validation state instead of their actual DNSSEC Secure state via a DNS ANY query, resulting in a denial of service condition for the installation that performs validate (dnssec=validate), and for clients requesting validation when on-demand validation is enabled (dnssec=process).
Related
freebsd
freebsd
powerdns-recursor -- cache pollution
2020-10-13 00:00:00
osv
osv
CVE-2020-25829
2020-10-16 06:15:12
pdns-recursor - security update
2024-07-01 00:00:00
cvelist
cvelist
CVE-2020-25829
2020-10-16 05:07:44
openvas
openvas
PowerDNS Recursor < 4.1.18, 4.2.0 < 4.2.4, 4.3.0 < 4.3.4 DoS Vulnerability
2020-10-26 00:00:00
Mageia: Security Advisory (MGASA-2020-0393)
2022-01-28 00:00:00
openSUSE: Security Advisory for pdns-recursor (openSUSE-SU-2020:1687-1)
2020-10-18 00:00:00
archlinux
archlinux
[ASA-202010-6] powerdns-recursor: denial of service
2020-10-18 00:00:00
cve
cve
CVE-2020-25829
2020-10-16 06:15:12
prion
prion
Input validation
2020-10-16 06:15:00
nessus
nessus
FreeBSD : powerdns-recursor -- cache pollution (a6860b11-0dee-11eb-94ff-6805ca2fa271)
2020-10-20 00:00:00
GLSA-202012-19 : PowerDNS Recursor: Denial of service
2020-12-24 00:00:00
openSUSE Security Update : pdns-recursor (openSUSE-2020-1687)
2020-10-19 00:00:00
ubuntucve
ubuntucve
CVE-2020-25829
2020-10-16 00:00:00
mageia
mageia
Updated pdns-recursor package fixes a security vulnerability
2020-10-24 20:51:47
alpinelinux
alpinelinux
CVE-2020-25829
2020-10-16 06:15:12
nvd
nvd
CVE-2020-25829
2020-10-16 06:15:12
gentoo
gentoo
PowerDNS Recursor: Denial of service
2020-12-23 00:00:00
debiancve
debiancve
CVE-2020-25829
2020-10-16 06:15:12
suse
suse
Security update for pdns-recursor (important)
2020-10-17 00:00:00
debian
debian
[SECURITY] [DLA 3855-1] pdns-recursor security update
2024-07-01 01:24:15