Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2019-3806

Опубликовано: 29 янв. 2019
Источник: debian

Описание

An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
pdns-recursorfixed4.1.9-1package
pdns-recursornot-affectedstretchpackage
pdns-recursornot-affectedjessiepackage

Примечания

  • https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2019-01.html

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 7 лет назад

An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua.

CVSS3: 8.1
nvd
около 7 лет назад

An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua.

CVSS3: 8.1
github
больше 3 лет назад

An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua.