PT-2018-4901 · Powerdns+1 · Powerdns Authoritative Server+1

Mathieu Lafon · Published 2017-01-13 · Updated 2024-06-15 · CVE-2016-2120

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions PowerDNS Authoritative Server versions up to and including 4.0.1 PowerDNS Authoritative Server versions up to and including 3.4.10

Description The issue allows an authorized user to crash the server by inserting a specially crafted record in a zone under their control and then sending a DNS query for that record. This is due to an integer overflow when checking if the content of the record matches the expected size, allowing an attacker to cause a read past the buffer boundary.

Recommendations For PowerDNS Authoritative Server versions up to and including 3.4.10, update to a version later than 3.4.10 to resolve the issue. For PowerDNS Authoritative Server versions up to and including 4.0.1, update to a version later than 4.0.1 to resolve the issue.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2017-1425

CVE-2016-2120

DLA-798-1

DSA-3764-1

MGASA-2017-0033

OPENSUSE-SU-2024:11156-1

OPENSUSE-SU-2024:11157-1

Affected Products

Alt Linux

Powerdns Authoritative Server

References · 62

• https://security-tracker.debian.org/tracker/CVE-2016-2120 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5426 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:11157-1 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2017-1425 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/pdns · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-2120 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0033 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11156-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-3764-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-2120 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7073 · Security Note
• https://debian.org/security/2017/dsa-3764 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2120 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5470 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7072 · Security Note