Published: 30/07/2019 Updated: 03/02/2023

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

A Vulnerability has been found in PowerDNS Authoritative Server prior to 4.1.9, 4.0.8 allowing a remote, authorized master server to cause a high CPU load or even prevent any further updates to any slave zone by sending a large number of NOTIFY messages. Note that only servers configured as slaves are affected by this issue.

Vulnerable Product	Search on Vulmon	Subscribe to Product
powerdns authoritative 4.1.0
powerdns authoritative
opensuse leap 15.0
opensuse leap 15.1
opensuse backports sle-15

Two vulnerabilities have been discovered in pdns, an authoritative DNS server which may result in denial of service via malformed zone records and excessive NOTIFY packets in a master/slave setup For the stable distribution (stretch), these problems have been fixed in version 403-1+deb9u5 We recommend that you upgrade your pdns packages For th ...

oss-sec mailing list archives   By Date By Thread </form>    PowerDNS Security Advisories 2019-04 and 2019-05   From: Erik Winkels &lt ...

CWE-770 https://blog.powerdns.com/2019/06/21/powerdns-authoritative-server-4-0-8-and-4-1-10-released/https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-05.html https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10163 http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00036.html http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00054.html https://nvd.nist.gov https://www.debian.org/security/2019/dsa-4470

CVE-2019-10163

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect