Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:1005-1

Опубликовано: 19 июл. 2020
Источник: suse-cvrf

Описание

Security update for pdns-recursor

This update for pdns-recursor fixes the following issues:

  • CVE-2020-14196: Fixed an access restriction bypass with API key and password authentication (boo#1173302).

Список пакетов

SUSE Package Hub 12 SP1
pdns-recursor-4.1.12-bp151.4.6.1
SUSE Package Hub 15 SP1
pdns-recursor-4.1.12-bp151.4.6.1
openSUSE Leap 15.1
pdns-recursor-4.1.12-bp151.4.6.1
openSUSE Leap 15.2
pdns-recursor-4.1.12-bp151.4.6.1

Ссылки

Описание

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced.

Затронутые продукты
SUSE Package Hub 12 SP1:pdns-recursor-4.1.12-bp151.4.6.1
SUSE Package Hub 15 SP1:pdns-recursor-4.1.12-bp151.4.6.1
openSUSE Leap 15.1:pdns-recursor-4.1.12-bp151.4.6.1
openSUSE Leap 15.2:pdns-recursor-4.1.12-bp151.4.6.1
Ссылки