PT-2018-12651 · Powerdns+1 · Powerdns Dnsdist+1

Richard Gibson · Published 2018-11-26 · Updated 2024-06-15 · CVE-2018-14663

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions PowerDNS DNSDist versions prior to 1.3.3

Description The issue allows a remote attacker to craft a DNS query with trailing data, potentially smuggling it to the backend as a valid record. This occurs when PowerDNS DNSDist is used as a DNS Firewall and either the useClientSubnet or addXPF parameters are used. The issue can bypass filtering of records that should not be received by the backend.

Recommendations For PowerDNS DNSDist versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue. As a temporary workaround, consider disabling the use of useClientSubnet or addXPF parameters when declaring a new backend until a patch is available. Restrict access to the backend to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-14663

OPENSUSE-SU-2023_2760-2

OPENSUSE-SU-2024:12731-1

SUSE-SU-2023:2760-1

SUSE-SU-2023:2760-2

SUSE-SU-2023:2777-1

Affected Products

Powerdns Dnsdist

Suse

References · 22

• https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2018-08.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2760-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-14663 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-14663 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:2777-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2760-2 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-14663 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-14663 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-14663 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-14663 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-14663 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12731-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2018-14663 · Note
• https://suse.com/security/cve/CVE-2017-7557 · Note
• https://bugzilla.suse.com/1054799 · Note