CVE-2019-3871

A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and
before 4.1.7. An insufficient validation of data coming from the user when
building a HTTP request from a DNS query in the HTTP Connector of the
Remote backend, allowing a remote user to cause a denial of service by
making the server connect to an invalid endpoint, or possibly information
disclosure by making the server connect to an internal endpoint and somehow
extracting meaningful information about the response

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924966&gt;