Summary
Ein Angreifer kann mehrere Schwachstellen in PowerDNS Authoritative Server ausnutzen, um Informationen offenzulegen, Daten zu manipulieren und einen Denial-of-Service-Zustand zu verursachen.
Product
Der Domain Name Service (DNS) ermöglicht die Umsetzung der Domainnamen in IP-Adressen. Zur Verhinderung von übermäßigen Anfragen werden die Zuordnungen häufig lokal in einem Cache gespeichert.
Vulnerabilities 5
-
High 7.5
Insufficient Validation of Autoprimary SOA Queries
Insufficient Validation of Autoprimary SOA Queries
-
Medium 6.8
Insufficient Validation of Names During AXFR
Insufficient Validation of Names During AXFR
-
Medium 5.9
Concurrency and locking defects in GSS-TSIG
Concurrency and locking defects in GSS-TSIG
-
Medium 4.9
Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail
Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail
-
Medium 4.8
Incorrect Behaviour of Views with TCP PROXY Requests
Incorrect Behaviour of Views with TCP PROXY Requests
Revision history
-
#3
Neue Updates von Fedora aufgenommen
-
#2
Neue Updates von Fedora und European Union Vulnerability Database aufgenommen
-
#1
Initiale Fassung
References
-
PowerDNS Security Advisory vom 2026-05-20
https://blog.powerdns.com/2026/05/20/powerdns-security-advisory-2026-06-for-powerdns-authoritative-server
-
Fedora Security Advisory FEDORA-EPEL-2026-86E966DCA4 vom 2026-05-21
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-86e966dca4
-
Fedora Security Advisory FEDORA-2026-A6E5B1263B vom 2026-05-21
https://bodhi.fedoraproject.org/updates/FEDORA-2026-a6e5b1263b
-
Fedora Security Advisory FEDORA-EPEL-2026-533C3439BA vom 2026-05-21
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-533c3439ba
-
Fedora Security Advisory FEDORA-2026-6458693037 vom 2026-05-21
https://bodhi.fedoraproject.org/updates/FEDORA-2026-6458693037
-
Fedora Security Advisory FEDORA-EPEL-2026-0E1191456B vom 2026-05-29
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-0e1191456b