CVE-2019-3806
CVE-2019-3806
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua.
CVSS 5.4 · Medium · EPSS 1.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
pdns-recursor
- Versions
- versions after 4.1.3 before 4.1.9: Affected
No fix published
pdns-recursor Debian:12
- Affected ranges
- ECOSYSTEM: < 4.1.9-1
Update to 4.1.9-1
pdns-recursor Debian:13
- Affected ranges
- ECOSYSTEM: < 4.1.9-1
Update to 4.1.9-1
pdns-recursor Debian:14
- Affected ranges
- ECOSYSTEM: < 4.1.9-1
Update to 4.1.9-1
pdns-recursor Ubuntu:Pro:16.04:LTS
- Versions
- 3.7.3-1
- 4.0.0~alpha1-1
- 4.0.0~alpha1-2
- 4.0.0~alpha2-2
- 4.0.0~alpha2-2ubuntu0.1
- 4.0.0~alpha2-2ubuntu0.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns-recursor Ubuntu:Pro:18.04:LTS
- Versions
- 4.0.6-1
- 4.0.6-1build1
- 4.0.7-1
- 4.1.1-1
- 4.1.1-1build1
- 4.1.1-2
- 4.1.1-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published