PT-2020-11872 · Powerdns+1 · Powerdns Recursor+1

Valentei Sergey · Published 2020-05-19 · Updated 2024-06-15 · CVE-2020-10030

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PowerDNS Recursor versions 4.1.0 through 4.3.0

Description The issue allows an attacker with sufficient privileges to change the system's hostname to cause disclosure of uninitialized memory content via a stack-based out-of-bounds read. This occurs on systems where gethostname() does not have '0' termination of the returned string if the hostname is larger than the supplied buffer. Linux and OpenBSD systems are not affected due to their handling of buffer sizes and string termination. Under certain conditions, this can lead to a denial of service or possibly arbitrary code execution.

Recommendations For PowerDNS Recursor versions 4.1.0 through 4.3.0, update to a version that includes a fix for this issue to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-10030

OPENSUSE-SU-2020:0698-1

OPENSUSE-SU-2020_0698-1

OPENSUSE-SU-2024:11157-1

Affected Products

Powerdns Recursor

Suse

References · 35

• https://osv.dev/vulnerability/DEBIAN-CVE-2020-10030 · Vendor Advisory
• https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-03.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11157-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10030 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PS4ZN5XGENYNFKX7QIIOUCQQHXE37GJF · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-10030 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2020:0698-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMP72NJGKBWR5WEBXAWX5KSLQUDFTG6S · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-10030 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-10030 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00052.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-10030 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-10030 · Vendor Advisory
• https://suse.com/security/cve/CVE-2019-3807 · Note
• https://suse.com/security/cve/CVE-2020-25829 · Note