CVE-2016-7074
CVE-2016-7074
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check that the TSIG record is the last one, leading to the possibility of parsing records that are not covered by the TSIG signature.
CVSS 5.3 · Medium · EPSS 1.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
pdns
- Versions
- 3.4.11: Affected
- 4.0.2: Affected
- 4.0.4: Affected
No fix published
pdns Debian:12
- Affected ranges
- ECOSYSTEM: < 4.0.2-1
Update to 4.0.2-1
pdns Debian:13
- Affected ranges
- ECOSYSTEM: < 4.0.2-1
Update to 4.0.2-1
pdns Debian:14
- Affected ranges
- ECOSYSTEM: < 4.0.2-1
Update to 4.0.2-1
pdns-recursor Debian:12
- Affected ranges
- ECOSYSTEM: < 4.0.4-1
Update to 4.0.4-1
pdns-recursor Debian:13
- Affected ranges
- ECOSYSTEM: < 4.0.4-1
Update to 4.0.4-1
pdns-recursor Debian:14
- Affected ranges
- ECOSYSTEM: < 4.0.4-1
Update to 4.0.4-1
pdns Ubuntu:Pro:16.04:LTS
- Versions
- 3.4.5-1build2
- 3.4.6-2
- 3.4.6-3
- 3.4.7-1
- 3.4.7-2
- 4.0.0~alpha1-1
- 4.0.0~alpha2-2
- 4.0.0~alpha2-3
- 4.0.0~alpha2-3build1
- 4.0.0~alpha2-3ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns-recursor Ubuntu:Pro:16.04:LTS
- Versions
- 3.7.3-1
- 4.0.0~alpha1-1
- 4.0.0~alpha1-2
- 4.0.0~alpha2-2
- 4.0.0~alpha2-2ubuntu0.1
- 4.0.0~alpha2-2ubuntu0.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published