Aller au contenu
Se connecter
5.3 Moyenne

CVE-2018-14644 An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4

Description

An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query for a meta-type like OPT can lead to a zone being wrongly cached as failing DNSSEC validation. It only arises if the parent zone is signed, and all the authoritative servers for that parent zone answer with FORMERR to a query for at least one of the meta-types. As a result, subsequent queries from clients requesting DNSSEC validation will be answered with a ServFail.

Produits et versions touchés

Produit Versions touchées Corrigé en
pdns 4.1.5 Pas de correctif indiqué
pdns 4.0.9 Pas de correctif indiqué

Autres CVE de pdns

Les 3 CVE de pdns →
CVE-2016-2120 An issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0.1 allowing an… 7.5 Élevée CVE-2018-1046 pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay 7.0 Élevée
Suivre cette CVE