p PatchFirst

CVE-2020-17482

CVE-2020-17482

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.

CVSS 4.3 · Medium · EPSS 2.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • pdns Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.3.1-1

    Update to 4.3.1-1

  • pdns Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.3.1-1

    Update to 4.3.1-1

  • pdns Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.3.1-1

    Update to 4.3.1-1

  • pdns Ubuntu:Pro:16.04:LTS

    Versions
    • 3.4.5-1build2
    • 3.4.6-2
    • 3.4.6-3
    • 3.4.7-1
    • 3.4.7-2
    • 4.0.0~alpha1-1
    • 4.0.0~alpha2-2
    • 4.0.0~alpha2-3
    • 4.0.0~alpha2-3build1
    Affected ranges
    • ECOSYSTEM: < 4.0.0~alpha2-3ubuntu0.1~esm1

    Update to 4.0.0~alpha2-3ubuntu0.1~esm1

  • pdns Ubuntu:Pro:18.04:LTS

    Versions
    • 4.0.4-2
    • 4.0.4-2build1
    • 4.0.5-1
    • 4.1.0-1
    • 4.1.0-2
    • 4.1.0-2build1
    • 4.1.1-1
    Affected ranges
    • ECOSYSTEM: < 4.1.1-1ubuntu0.1~esm1

    Update to 4.1.1-1ubuntu0.1~esm1

  • pdns Ubuntu:Pro:20.04:LTS

    Versions
    • 4.1.6-3build1
    • 4.2.0-1
    • 4.2.1-1
    • 4.2.1-1build1
    • 4.2.1-1build2
    Affected ranges
    • ECOSYSTEM: < 4.2.1-1ubuntu0.1~esm1

    Update to 4.2.1-1ubuntu0.1~esm1

Original sources

Check your server →