PT-2018-12638 · Powerdns+3 · Powerdns Recursor+3

Toshifumi Sakaguchi · Published 2018-11-09 · Updated 2025-01-14 · CVE-2018-14644

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions PowerDNS Recursor versions 4.0.0 through 4.1.4

Description A remote attacker can send a DNS query for a meta-type like OPT, leading to a zone being wrongly cached as failing DNSSEC validation. This issue arises when the parent zone is signed and all authoritative servers for that parent zone answer with FORMERR to a query for at least one of the meta-types. As a result, subsequent queries from clients requesting DNSSEC validation will be answered with a ServFail.

Recommendations For PowerDNS Recursor versions 4.0.0 through 4.1.4, update to a version later than 4.1.4 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-14644

MGASA-2019-0009

OPENSUSE-SU-2018:4062-1

OPENSUSE-SU-2018:4177-1

OPENSUSE-SU-2018_4151-1

OPENSUSE-SU-2018_4152-1

OPENSUSE-SU-2024:11157-1

USN-7203-1

Affected Products

Linuxmint

Powerdns Recursor

Suse

Ubuntu

References · 65

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1046 · Security Note
• https://ubuntu.com/security/CVE-2022-27227 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11157-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14644 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2018:4062-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10851 · Security Note
• https://ubuntu.com/security/CVE-2020-17482 · Vendor Advisory
• https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-07.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14644 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1046 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14626 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27227 · Security Note
• https://cve.org/CVERecord?id=CVE-2018-14644 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-14644 · Security Note
• https://ubuntu.com/security/CVE-2018-10851 · Vendor Advisory