Lucene search

K
osvGoogleOSV:CVE-2016-7073
HistorySep 11, 2018 - 1:29 p.m.

CVE-2016-7073

2018-09-1113:29:01
Google
osv.dev
9

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

38.0%

An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check of the TSIG time and fudge values was found in AXFRRetriever, leading to a possible replay attack.