PT-2018-4979 · Powerdns+1 · Powerdns+3

Mongo · Publicado 2017-01-13 · Atualizado 2024-06-15 · CVE-2016-7073

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions PowerDNS versions prior to 3.4.11 and 4.0.2 PowerDNS recursor versions prior to 4.0.4

Description A problem has been discovered that allows an attacker in a man-in-the-middle position to alter the content of an AXFR due to insufficient validation of TSIG signatures. The issue is caused by a missing check of the TSIG time and fudge values in AXFRRetriever, which could lead to a replay attack.

Recommendations For PowerDNS versions prior to 3.4.11, update to version 3.4.11 or later. For PowerDNS versions prior to 4.0.2, update to version 4.0.2 or later. For PowerDNS recursor versions prior to 4.0.4, update to version 4.0.4 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2017-1425

CVE-2016-7073

DLA-798-1

DSA-3764-1

MGASA-2017-0033

OPENSUSE-SU-2024:11156-1

Produtos afetados

Alt Linux

Powerdns

Powerdns Recursor

Powerdns Authoritative Server

Referências · 47

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5426 · Nota de Segurança
• https://suse.com/security/cve/CVE-2018-1046 · Nota
• https://errata.altlinux.org/ALT-PU-2017-1425 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/source-package/pdns · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2016-2120 · Nota
• https://suse.com/security/cve/CVE-2019-3871 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-7073 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-10851 · Nota
• https://suse.com/security/cve/CVE-2017-15091 · Nota
• https://ubuntu.com/security/CVE-2016-7073 · Aviso do Fabricante
• https://doc.powerdns.com/md/security/powerdns-advisory-2016-04 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2017-0033 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:11156-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-7073 · Nota de Segurança
• https://security-tracker.debian.org/tracker/DSA-3764-1 · Aviso do Fabricante