PRIOn knowledge basePRION:CVE-2022-27227Input validation
In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.
References
www.openwall.com/lists/oss-security/2022/03/25/1
doc.powerdns.com/authoritative/security-advisories/index.html
doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2022-01.html
docs.powerdns.com/recursor/security-advisories/index.html
docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2022-01.html
lists.fedoraproject.org/archives/list/[email protected]/message/2QKN56VWXUVFOYGUN75N5IRNK66OHTHT/
lists.fedoraproject.org/archives/list/[email protected]/message/HEABZA46XYEUWMGSY2GYYVHISBVWEHIO/
lists.fedoraproject.org/archives/list/[email protected]/message/IPHOFNI7FKM5NNOVDOWO4TBXFAFICCUE/
lists.fedoraproject.org/archives/list/[email protected]/message/ZJSKICB67SPPEGNXCQLZVSWR6QGCN3KP/
Related
