PT-2018-4979 · Powerdns+1 · Powerdns+3

Mongo · Published 2017-01-13 · Updated 2024-06-15 · CVE-2016-7073

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions PowerDNS versions prior to 3.4.11 and 4.0.2 PowerDNS recursor versions prior to 4.0.4

Description A problem has been discovered that allows an attacker in a man-in-the-middle position to alter the content of an AXFR due to insufficient validation of TSIG signatures. The issue is caused by a missing check of the TSIG time and fudge values in AXFRRetriever, which could lead to a replay attack.

Recommendations For PowerDNS versions prior to 3.4.11, update to version 3.4.11 or later. For PowerDNS versions prior to 4.0.2, update to version 4.0.2 or later. For PowerDNS recursor versions prior to 4.0.4, update to version 4.0.4 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALT-PU-2017-1425

CVE-2016-7073

DLA-798-1

DSA-3764-1

MGASA-2017-0033

OPENSUSE-SU-2024:11156-1

Affected Products

Alt Linux

Powerdns

Powerdns Recursor

Powerdns Authoritative Server

References · 47

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5426 · Security Note
• https://errata.altlinux.org/ALT-PU-2017-1425 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/pdns · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-7073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-7073 · Vendor Advisory
• https://doc.powerdns.com/md/security/powerdns-advisory-2016-04 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0033 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11156-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-7073 · Security Note
• https://security-tracker.debian.org/tracker/DSA-3764-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7073 · Security Note
• https://debian.org/security/2017/dsa-3764 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-7073 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2120 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2016-7073 · Vendor Advisory