CVE-2016-7073
CVE-2016-7073
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check of the TSIG time and fudge values was found in AXFRRetriever, leading to a possible replay attack.
CVSS 5.3 · Medium · EPSS 1.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
pdns
- Versions
- 3.4.11: Affected
- 4.0.2: Affected
- 4.0.4: Affected
No fix published
pdns Debian:12
- Affected ranges
- ECOSYSTEM: < 4.0.2-1
Update to 4.0.2-1
pdns Debian:13
- Affected ranges
- ECOSYSTEM: < 4.0.2-1
Update to 4.0.2-1
pdns Debian:14
- Affected ranges
- ECOSYSTEM: < 4.0.2-1
Update to 4.0.2-1
pdns-recursor Debian:12
- Affected ranges
- ECOSYSTEM: < 4.0.4-1
Update to 4.0.4-1
pdns-recursor Debian:13
- Affected ranges
- ECOSYSTEM: < 4.0.4-1
Update to 4.0.4-1
pdns-recursor Debian:14
- Affected ranges
- ECOSYSTEM: < 4.0.4-1
Update to 4.0.4-1
pdns Ubuntu:Pro:16.04:LTS
- Versions
- 3.4.5-1build2
- 3.4.6-2
- 3.4.6-3
- 3.4.7-1
- 3.4.7-2
- 4.0.0~alpha1-1
- 4.0.0~alpha2-2
- 4.0.0~alpha2-3
- 4.0.0~alpha2-3build1
- 4.0.0~alpha2-3ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns-recursor Ubuntu:Pro:16.04:LTS
- Versions
- 3.7.3-1
- 4.0.0~alpha1-1
- 4.0.0~alpha1-2
- 4.0.0~alpha2-2
- 4.0.0~alpha2-2ubuntu0.1
- 4.0.0~alpha2-2ubuntu0.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published