ALT-PU-2022-3173

Критический

ALT-PU-2022-3173: package pdns update to version 4.6.3-alt2

Источник

errata.altlinux.org

Дата публикации

18.11.2022

Дата обновления

18.11.2022

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades pdns to version 4.6.3-alt2.

Устраненные уязвимости6

CVE-2020-17482

Средний 4.3

Дата публикации: 02.10.2020

CWE-908

An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.

CVSS 3.1

Средний 4.3

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: Low
Integrity: None
Availability: None

CVSS 2.0

Средний 4

AV:N/AC:L/Au:S/C:P/I:N/A:N

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: Partial
Integrity: None
Availability: None

Ссылки

CVE-2020-17482 https://nvd.nist.gov/vuln/detail/CVE-2020-17482

Ссылки1

ALT-PU-2022-3173 https://errata.altlinux.org/ALT-PU-2022-3173

Связанные уязвимости

ALT-PU-2022-2644

CVSS3: 9.8

altlinux

около 4 лет назад

ALT-PU-2022-2644: package `pdns` update to version 4.6.3-alt1

CVE-2020-17482

CVSS3: 4.3

ubuntu

около 6 лет назад

CVE-2020-17482

CVSS3: 4.3

nvd

около 6 лет назад

CVE-2020-17482

CVSS3: 4.3

debian

около 6 лет назад

An issue has been found in PowerDNS Authoritative Server before 4.3.1 ...

openSUSE-SU-2020:1556-1

suse-cvrf

около 6 лет назад

Security update for pdns