CVE-2022-27227
CVE-2022-27227
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.
CVSS 7.5 · High · EPSS 5.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
pdns Debian:12
- Affected ranges
- ECOSYSTEM: < 4.6.1-1
Update to 4.6.1-1
pdns Debian:13
- Affected ranges
- ECOSYSTEM: < 4.6.1-1
Update to 4.6.1-1
pdns Debian:14
- Affected ranges
- ECOSYSTEM: < 4.6.1-1
Update to 4.6.1-1
pdns-recursor Debian:12
- Affected ranges
- ECOSYSTEM: < 4.6.1-1
Update to 4.6.1-1
pdns-recursor Debian:13
- Affected ranges
- ECOSYSTEM: < 4.6.1-1
Update to 4.6.1-1
pdns-recursor Debian:14
- Affected ranges
- ECOSYSTEM: < 4.6.1-1
Update to 4.6.1-1
pdns Ubuntu:Pro:16.04:LTS
- Versions
- 3.4.5-1build2
- 3.4.6-2
- 3.4.6-3
- 3.4.7-1
- 3.4.7-2
- 4.0.0~alpha1-1
- 4.0.0~alpha2-2
- 4.0.0~alpha2-3
- 4.0.0~alpha2-3build1
- 4.0.0~alpha2-3ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns-recursor Ubuntu:Pro:16.04:LTS
- Versions
- 3.7.3-1
- 4.0.0~alpha1-1
- 4.0.0~alpha1-2
- 4.0.0~alpha2-2
- 4.0.0~alpha2-2ubuntu0.1
- 4.0.0~alpha2-2ubuntu0.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns Ubuntu:Pro:18.04:LTS
- Versions
- 4.0.4-2
- 4.0.4-2build1
- 4.0.5-1
- 4.1.0-1
- 4.1.0-2
- 4.1.0-2build1
- 4.1.1-1
- Affected ranges
- ECOSYSTEM: < 4.1.1-1ubuntu0.1~esm1
Update to 4.1.1-1ubuntu0.1~esm1
pdns-recursor Ubuntu:Pro:18.04:LTS
- Versions
- 4.0.6-1
- 4.0.6-1build1
- 4.0.7-1
- 4.1.1-1
- 4.1.1-1build1
- 4.1.1-2
- Affected ranges
- ECOSYSTEM: < 4.1.1-2ubuntu0.1~esm1
Update to 4.1.1-2ubuntu0.1~esm1
pdns Ubuntu:Pro:20.04:LTS
- Versions
- 4.1.6-3build1
- 4.2.0-1
- 4.2.1-1
- 4.2.1-1build1
- 4.2.1-1build2
- Affected ranges
- ECOSYSTEM: < 4.2.1-1ubuntu0.1~esm1
Update to 4.2.1-1ubuntu0.1~esm1
pdns-recursor Ubuntu:Pro:20.04:LTS
- Versions
- 4.2.0-6
- 4.2.1-1
- 4.2.1-1build1
- 4.2.1-1build2
- Affected ranges
- ECOSYSTEM: < 4.2.1-1ubuntu0.1~esm1
Update to 4.2.1-1ubuntu0.1~esm1
pdns Ubuntu:Pro:22.04:LTS
- Versions
- 4.4.1-1build1
- 4.4.1-3
- 4.4.1-4
- 4.5.2-1build1
- 4.5.3-1
- Affected ranges
- ECOSYSTEM: < 4.5.3-1ubuntu0.1~esm1
Update to 4.5.3-1ubuntu0.1~esm1
pdns-recursor Ubuntu:Pro:22.04:LTS
- Versions
- 4.4.2-3
- 4.6.0-1ubuntu1
- Affected ranges
- ECOSYSTEM: < 4.6.0-1ubuntu1+esm1
Update to 4.6.0-1ubuntu1+esm1
Original sources
- https://docs.powerdns.com/recursor/security-advisories/index.html
- https://doc.powerdns.com/authoritative/security-advisories/index.html
- https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2022-01.html
- https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2022-01.html
- http://www.openwall.com/lists/oss-security/2022/03/25/1
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2QKN56VWXUVFOYGUN75N5IRNK66OHTHT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HEABZA46XYEUWMGSY2GYYVHISBVWEHIO/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJSKICB67SPPEGNXCQLZVSWR6QGCN3KP/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPHOFNI7FKM5NNOVDOWO4TBXFAFICCUE/
- https://nvd.nist.gov/vuln/detail/CVE-2022-27227