UBUNTU-CVE-2019-10162
Dashboard / Vulnerabilities / UBUNTU-CVE-2019-10162
Summary:
Details: A vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.10, 4.0.8 allowing an authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. The issue is due to the fact that the Authoritative Server will exit when it runs into a parsing error while looking up the NS/A/AAAA records it is about to use for an outgoing notify.
References: https://ubuntu.com/security/CVE-2019-10162, https://www.openwall.com/lists/oss-security/2019/06/21/5, https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-04.html, https://www.cve.org/CVERecord?id=CVE-2019-10162
Affected packages
Package
Name: pdns
Purl: pkg:deb/ubuntu/[email protected]~alpha2-3ubuntu0.1~esm1?arch=source&distro=esm-apps/xenial
Affected ranges
Type: ECOSYSTEM
Events:
