p PatchFirst

CVE-2014-7210

CVE-2014-7210

This page contains facts from public vulnerability sources. Check the original advisory before updating.

pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends are not affected.

CVSS 9.8 · Critical · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • pdns

    Versions
    • ≥ 0, < 3.3.1-1: Affected (custom)

    Update to 3.3.1-1

  • pdns Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.3.1-1

    Update to 3.3.1-1

  • pdns Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.3.1-1

    Update to 3.3.1-1

  • pdns Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.3.1-1

    Update to 3.3.1-1

Original sources

Check your server →