Summary
Ein Angreifer kann mehrere Schwachstellen in PowerDNS ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um einen Denial of Service Angriff durchzuführen.
Product
Der Domain Name Service (DNS) ermöglicht die Umsetzung der Domainnamen in IP-Adressen. Zur Verhinderung von übermäßigen Anfragen werden die Zuordnungen häufig lokal in einem Cache gespeichert.
Vulnerabilities 9
-
Medium 5.9
Null pointer accces in aggressive NSEC(3) cache
A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service.
-
Medium 5.9
Insufficient validation of cookie reply
An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default.
-
Medium 5.3
Unbounded memory allocation by internal web server
An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.
-
Medium 5.3
Insufficient input validation of internal webserver
An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.
-
Medium 5.3
Crafted zones can cause increased resource usage
By publishing and querying a crafted zone an attacker can cause allocation of large entries in the negative and aggressive NSEC(3) caches.
-
Medium 5.3
Insufficient input validation of internal webserver
An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.
-
Medium 5.0
Concurrent modification of RPZ data can lead to denial of servce
Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a crash of the recursor. Normally concurrent transfers of the same RPZ zone can only occur with a malfunctioning RPZ provider.
-
Medium 4.4
Null pointer dereference in RPZ transfer
An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service.
-
Medium 4.4
Insufficient validation of zonemd record
If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zone that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service.
Revision history
-
#6
Neue Updates aufgenommen
-
#5
Neue Updates von SUSE aufgenommen
-
#4
Neue Updates von openSUSE aufgenommen
-
#3
Neue Updates von Debian aufgenommen
-
#2
Referenz(en) aufgenommen: EUVD-2026-24720, EUVD-2026-24721, EUVD-2026-24723, EUVD-2026-24725, EUVD-2026-24729, EUVD-2026-24731, EUVD-2026-24733, EUVD-2026-24719, EUVD-2026-24727
-
#1
Initiale Fassung
References
-
PowerDNS Security Advisory vom 2026-04-21
https://blog.powerdns.com/2026/04/22/powerdns-security-advisory-2026-03
-
Debian Security Advisory DSA-6234 vom 2026-04-29
https://lists.debian.org/debian-security-announce/2026/msg00144.html
-
openSUSE Security Update OPENSUSE-SU-2026:10632-1 vom 2026-04-29
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XQGYOSCKMETGMCQAB25RADRSIOXN6GSR/
-
SUSE Security Update SUSE-SU-2026:22319-1 vom 2026-07-01
https://lists.suse.com/pipermail/sle-security-updates/2026-July/027150.html
-
cPanel & WHM Change Log
https://docs.cpanel.net/changelogs/138-change-log/