CVE-2017-15090
CVE-2017-15090
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue has been found in the DNSSEC validation component of PowerDNS Recursor from 4.0.0 and up to and including 4.0.6, where the signatures might have been accepted as valid even if the signed data was not in bailiwick of the DNSKEY used to sign it. This allows an attacker in position of man-in-the-middle to alter the content of records by issuing a valid signature for the crafted records.
CVSS 5.9 · Medium · EPSS 0.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
powerdns
- Versions
- from 4.0.0 and up to and including 4.0.6: Affected
No fix published
pdns-recursor Debian:12
- Affected ranges
- ECOSYSTEM: < 4.0.7-1
Update to 4.0.7-1
pdns-recursor Debian:13
- Affected ranges
- ECOSYSTEM: < 4.0.7-1
Update to 4.0.7-1
pdns-recursor Debian:14
- Affected ranges
- ECOSYSTEM: < 4.0.7-1
Update to 4.0.7-1
pdns-recursor Ubuntu:Pro:16.04:LTS
- Versions
- 3.7.3-1
- 4.0.0~alpha1-1
- 4.0.0~alpha1-2
- 4.0.0~alpha2-2
- 4.0.0~alpha2-2ubuntu0.1
- 4.0.0~alpha2-2ubuntu0.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published