Lucene search
Veracode Vulnerability DatabaseVERACODE:26268HistoryAug 06, 2020 - 9:39 p.m.
Validation Bypass
2020-08-0621:39:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.006 Low
EPSS
Percentile
77.9%
PowerDNS Recursor is vulnerable validation bypass. The answer section of a NXDOMAIN response lacking an SOA is not properly validated in SyncRes::processAnswer, allowing an attacker to bypass DNSSEC validation.
References
lists.opensuse.org/opensuse-security-announce/2020-05/msg00052.html
www.openwall.com/lists/oss-security/2020/05/19/3
doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-02.html
lists.fedoraproject.org/archives/list/[email protected]/message/NMP72NJGKBWR5WEBXAWX5KSLQUDFTG6S/
lists.fedoraproject.org/archives/list/[email protected]/message/PS4ZN5XGENYNFKX7QIIOUCQQHXE37GJF/
www.debian.org/security/2020/dsa-4691
Related
nvd
nvd
CVE-2020-12244
2020-05-19 14:15:11
alpinelinux
alpinelinux
CVE-2020-12244
2020-05-19 14:15:11
debiancve
debiancve
CVE-2020-12244
2020-05-19 14:15:11
hackerone
hackerone
Open-Xchange: Recursor accepts unsigned, empty NXDOMAINs in secure zones
2020-04-24 21:00:59
ubuntucve
ubuntucve
CVE-2020-12244
2020-05-19 00:00:00
cve
cve
CVE-2020-12244
2020-05-19 14:15:11
prion
prion
Input validation
2020-05-19 14:15:00
osv
osv
CVE-2020-12244
2020-05-19 14:15:11
pdns-recursor - security update
2020-05-21 00:00:00
cvelist
cvelist
CVE-2020-12244
2020-05-19 13:51:39
nessus
nessus
Debian DSA-4691-1 : pdns-recursor - security update
2020-05-22 00:00:00
openSUSE Security Update : pdns-recursor (openSUSE-2020-698)
2020-05-26 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-4691-1)
2020-05-23 00:00:00
Mageia: Security Advisory (MGASA-2020-0223)
2022-01-28 00:00:00
archlinux
archlinux
[ASA-202005-10] powerdns-recursor: multiple issues
2020-05-19 00:00:00
debian
debian
[SECURITY] [DSA 4691-1] pdns-recursor security update
2020-05-21 21:21:19
mageia
mageia
Updated pdns-recursor packages fix security vulnerabilities
2020-05-24 21:04:47
freebsd
freebsd
powerdns-recursor -- multiple vulnerabilities
2020-05-19 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: pdns-recursor-4.3.1-1.fc32
2020-06-14 17:03:48
[SECURITY] Fedora 31 Update: pdns-recursor-4.2.2-1.fc31
2020-06-14 17:12:05
suse
suse
Security update for pdns-recursor (moderate)
2020-05-23 00:00:00