PT-2018-12638 · Powerdns+3 · Powerdns Recursor+3

Toshifumi Sakaguchi · Publicado 2018-11-09 · Atualizado 2025-01-14 · CVE-2018-14644

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions PowerDNS Recursor versions 4.0.0 through 4.1.4

Description A remote attacker can send a DNS query for a meta-type like OPT, leading to a zone being wrongly cached as failing DNSSEC validation. This issue arises when the parent zone is signed and all authoritative servers for that parent zone answer with FORMERR to a query for at least one of the meta-types. As a result, subsequent queries from clients requesting DNSSEC validation will be answered with a ServFail.

Recommendations For PowerDNS Recursor versions 4.0.0 through 4.1.4, update to a version later than 4.1.4 to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-14644

MGASA-2019-0009

OPENSUSE-SU-2018:4062-1

OPENSUSE-SU-2018:4177-1

OPENSUSE-SU-2018_4151-1

OPENSUSE-SU-2018_4152-1

OPENSUSE-SU-2024:11157-1

USN-7203-1

Produtos afetados

Linuxmint

Powerdns Recursor

Suse

Ubuntu

Referências · 65

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1046 · Nota de Segurança
• https://ubuntu.com/security/CVE-2022-27227 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:11157-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1114157 · Nota
• https://suse.com/security/cve/CVE-2018-16855.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14644 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-2120 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/M2UYXXO7I4TUSSSVHBOZEQKRR4SWMVXY/#M2UYXXO7I4TUSSSVHBOZEQKRR4SWMVXY · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2018:4062-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10851 · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-10851 · Nota
• https://suse.com/security/cve/CVE-2018-16855 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=23815 · Nota
• https://suse.com/security/cve/CVE-2020-10995 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/DOLOBIPIZ3LAIYOJATK4335ZBTPVTRC2 · Nota