Skip to content
OpenAdvisories
Medium · 5.3 CVE-2018-10851 EUVD-2018-2920GHSA-v52v-2q9p-gp4x

PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9,…

Published Nov 29, 2018 · Updated Aug 5, 2024 · Assigned by redhat

Vendor: The PowerDNS Project Product: pdns Product: pdns-recursor Package: pdns Package: pdns Package: pdns Package: pdns-recursor Package: pdns-recursor Package: pdns-recursor Ecosystem: Alpine Ecosystem: Debian Ecosystem: Ubuntu

Description

PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.

Affected products

VendorProductAffectedFixed
The PowerDNS Project pdns 3.3.0 to 4.1.4, excluding 4.1.5 and 4.0.6 —
The PowerDNS Project pdns-recursor 3.2 to 4.1.4, excluding 4.1.5 and 4.0.9 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 pdns 4.1.5-1 —
Debian 14 pdns-recursor 4.1.7-1 —
Debian 13 pdns 4.1.5-1 —
Debian 13 pdns-recursor 4.1.7-1 —
Debian 12 pdns 4.1.5-1 —
Debian 12 pdns-recursor 4.1.7-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu Pro 22.04 LTS pdns 4.5.3-1ubuntu0.1~esm1 USN-7203-1
Ubuntu Pro 22.04 LTS pdns-recursor 4.6.0-1ubuntu1+esm1 USN-7203-1
Ubuntu Pro 20.04 LTS pdns +1 4.2.1-1ubuntu0.1~esm1 USN-7203-1
Ubuntu Pro 18.04 LTS pdns 4.1.1-1ubuntu0.1~esm1 USN-7203-1
Ubuntu Pro 18.04 LTS pdns-recursor 4.1.1-2ubuntu0.1~esm1 USN-7203-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS pdns 4.0.0~alpha2-3ubuntu0.1~esm1 USN-7203-1
Ubuntu Pro 16.04 LTS pdns-recursor 4.0.0~alpha2-2ubuntu0.1+esm1 USN-7203-1

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 pdns +1 4.1.2-bp150.2.3.1 openSUSE-SU-2018:4177-1, openSUSE-SU-2018:4175-1
SUSE Package Hub 12 SP1 pdns 4.1.5-14.1 openSUSE-SU-2018:4073-1
SUSE Package Hub 12 SP1 pdns-recursor 4.1.8-13.1 openSUSE-SU-2018:4062-1
SUSE OpenStack Cloud Crowbar 8 crowbar-core 5.0+git.1585575551.16781d00d-3.38.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud Crowbar 8 crowbar-ha 5.0+git.1585316176.344190f-3.32.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud Crowbar 8 crowbar-openstack 5.0+git.1585304226.2164b7895-4.37.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud Crowbar 8 documentation-suse-openstack-cloud-deployment +3 8.20200319-1.23.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud Crowbar 8 memcached 1.5.17-3.3.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud Crowbar 8 openstack-manila 5.1.1~dev5-3.26.2 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud Crowbar 8 openstack-manila-doc 5.1.1~dev5-3.26.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud Crowbar 8 openstack-neutron 11.0.9~dev63-3.30.2 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud Crowbar 8 openstack-neutron-doc 11.0.9~dev63-3.30.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud Crowbar 8 openstack-nova 16.1.9~dev61-3.35.2 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud Crowbar 8 openstack-nova-doc 16.1.9~dev61-3.35.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud Crowbar 8 python-amqp 2.4.2-3.9.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud Crowbar 8 rubygem-puma 2.16.0-3.6.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud Crowbar 8 zookeeper 3.4.10-3.6.1 SUSE-SU-2020:1066-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE OpenStack Cloud 8 ardana-ansible 8.0+git.1583432621.24fa60e-3.70.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 ardana-barbican 8.0+git.1585152761.8ef3d61-4.33.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 ardana-db 8.0+git.1583944923.03cca6c-3.31.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 ardana-monasca 8.0+git.1583944894.38f023a-3.24.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 ardana-mq 8.0+git.1583944811.dc14403-3.19.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 ardana-neutron 8.0+git.1584715262.e4ea620-3.39.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 ardana-octavia 8.0+git.1585171918.418f5cf-3.26.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 ardana-tempest 8.0+git.1585311051.6ab5488-3.33.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 documentation-suse-openstack-cloud-user +8 8.20200319-1.23.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 memcached 1.5.17-3.3.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 openstack-manila 5.1.1~dev5-3.26.2 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 openstack-manila-doc 5.1.1~dev5-3.26.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 openstack-neutron 11.0.9~dev63-3.30.2 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 openstack-neutron-doc 11.0.9~dev63-3.30.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 openstack-nova 16.1.9~dev61-3.35.2 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 openstack-nova-doc 16.1.9~dev61-3.35.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 pdns 4.1.2-3.6.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 python-amqp 2.4.2-3.9.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-aodh 5.1.1~dev7-12.24.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-barbican 5.0.2~dev3-12.25.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-ceilometer 9.0.8~dev7-12.22.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-cinder 11.2.3~dev23-14.25.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-designate 5.0.3~dev7-12.23.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-freezer 5.0.0.0~xrc2~dev2-10.20.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-glance 15.0.3~dev3-12.23.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-heat 9.0.8~dev22-12.25.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-ironic 9.1.8~dev8-12.25.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-keystone 12.0.4~dev5-11.26.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-magnum 5.0.2_5.0.2_5.0.2~dev31-11.24.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-manila 5.1.1~dev5-12.29.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-monasca-ceilometer 1.5.1_1.5.1_1.5.1~dev3-8.20.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-murano 4.0.2~dev2-12.20.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-neutron 11.0.9~dev63-13.28.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-nova 16.1.9~dev61-11.26.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-octavia 1.0.6~dev3-12.25.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-sahara 7.0.5~dev4-11.24.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 venv-openstack-trove 8.0.2~dev2-11.24.1 SUSE-SU-2020:1066-1
SUSE OpenStack Cloud 8 zookeeper 3.4.10-3.6.1 SUSE-SU-2020:1066-1
SUSE Manager Server 3.1 cobbler 2.6.6-5.25.1 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 py26-compat-salt 2016.11.10-1.19.3 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 spacecmd 2.7.8.15-2.32.1 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 spacewalk-branding 2.7.2.17-2.31.3 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 spacewalk-java 2.7.46.19-2.41.3 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 spacewalk-utils 2.7.10.11-2.23.3 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 spacewalk-web 2.7.1.21-2.35.1 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 subscription-matcher 0.22-4.9.2 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 susemanager 3.1.19-2.34.2 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 susemanager-docs_en 3.1-10.29.4 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 susemanager-frontend-libs 3.1.2-3.10.1 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 susemanager-schema 3.1.21-2.36.1 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Server 3.1 tika-core 1.20-1.6.2 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE Manager Proxy 3.1 spacewalk-web 2.7.1.21-2.35.1 SUSE-SU-2019:0863-1, SUSE-RU-2019:0863-1
SUSE HPE Helion OpenStack 8 ardana-ansible 8.0+git.1583432621.24fa60e-3.70.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 ardana-barbican 8.0+git.1585152761.8ef3d61-4.33.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 ardana-db 8.0+git.1583944923.03cca6c-3.31.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 ardana-monasca 8.0+git.1583944894.38f023a-3.24.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 ardana-mq 8.0+git.1583944811.dc14403-3.19.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 ardana-neutron 8.0+git.1584715262.e4ea620-3.39.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 ardana-octavia 8.0+git.1585171918.418f5cf-3.26.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 ardana-tempest 8.0+git.1585311051.6ab5488-3.33.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 documentation-hpe-helion-openstack-user +5 8.20200319-1.23.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 memcached 1.5.17-3.3.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 openstack-manila 5.1.1~dev5-3.26.2 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 openstack-manila-doc 5.1.1~dev5-3.26.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 openstack-neutron 11.0.9~dev63-3.30.2 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 openstack-neutron-doc 11.0.9~dev63-3.30.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 openstack-nova 16.1.9~dev61-3.35.2 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 openstack-nova-doc 16.1.9~dev61-3.35.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 pdns 4.1.2-3.6.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 python-amqp 2.4.2-3.9.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-aodh 5.1.1~dev7-12.24.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-barbican 5.0.2~dev3-12.25.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-ceilometer 9.0.8~dev7-12.22.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-cinder 11.2.3~dev23-14.25.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-designate 5.0.3~dev7-12.23.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-freezer 5.0.0.0~xrc2~dev2-10.20.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-glance 15.0.3~dev3-12.23.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-heat 9.0.8~dev22-12.25.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-ironic 9.1.8~dev8-12.25.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-keystone 12.0.4~dev5-11.26.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-magnum 5.0.2_5.0.2_5.0.2~dev31-11.24.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-manila 5.1.1~dev5-12.29.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-monasca-ceilometer 1.5.1_1.5.1_1.5.1~dev3-8.20.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-murano 4.0.2~dev2-12.20.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-neutron 11.0.9~dev63-13.28.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-nova 16.1.9~dev61-11.26.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-octavia 1.0.6~dev3-12.25.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-sahara 7.0.5~dev4-11.24.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 venv-openstack-trove 8.0.2~dev2-11.24.1 SUSE-SU-2020:1066-1
SUSE HPE Helion OpenStack 8 zookeeper 3.4.10-3.6.1 SUSE-SU-2020:1066-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed pdns 4.5.1-1.5 openSUSE-SU-2024:11156-1
openSUSE Tumbleweed pdns-recursor 4.5.5-1.3 openSUSE-SU-2024:11157-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 pdns 4.1.5-r0 —
Alpine v3.24 pdns-recursor 4.1.7-r0 —
Alpine v3.23 pdns 4.1.5-r0 —
Alpine v3.23 pdns-recursor 4.1.7-r0 —
Alpine v3.22 pdns 4.1.5-r0 —
Alpine v3.22 pdns-recursor 4.1.7-r0 —
Alpine v3.21 pdns 4.1.5-r0 —
Alpine v3.21 pdns-recursor 4.1.7-r0 —
Alpine v3.20 pdns 4.1.5-r0 —
Alpine v3.20 pdns-recursor 4.1.7-r0 —
Show 15 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 pdns 4.1.5-r0 —
Alpine v3.19 pdns-recursor 4.1.7-r0 —
Alpine v3.18 pdns 4.1.5-r0 —
Alpine v3.18 pdns-recursor 4.1.7-r0 —
Alpine v3.17 pdns 4.1.5-r0 —
Alpine v3.17 pdns-recursor 4.1.7-r0 —
Alpine v3.16 pdns 4.1.5-r0 —
Alpine v3.16 pdns-recursor 4.1.7-r0 —
Alpine v3.15 pdns 4.1.5-r0 —
Alpine v3.15 pdns-recursor 4.1.7-r0 —
Alpine v3.14 pdns 4.1.5-r0 —
Alpine v3.14 pdns-recursor 4.1.7-r0 —
Alpine v3.13 pdns 4.1.5-r0 —
Alpine v3.13 pdns-recursor 4.1.7-r0 —
Alpine v3.12 pdns 4.1.5-r0 —
Alpine v3.12 pdns-recursor 4.1.7-r0 —
Alpine v3.11 pdns 4.1.5-r0 —
Alpine v3.11 pdns-recursor 4.1.7-r0 —
Alpine v3.10 pdns 4.1.5-r0 —
Alpine v3.10 pdns-recursor 4.1.7-r0 —
Alpine v3.9 pdns 4.1.5-r0 —
Alpine v3.9 pdns-recursor 4.1.7-r0 —
Alpine v3.8 pdns 4.1.5-r0 —
Alpine v3.8 pdns-recursor 4.1.8-r0 —
Alpine v3.7 pdns 4.0.6-r0 —
Alpine v3.7 pdns-recursor 4.0.9-r0 —
Alpine v3.6 pdns 4.0.6-r0 —
Alpine v3.6 pdns-recursor 4.0.9-r0 —
Alpine v3.5 pdns 4.0.6-r0 —
Alpine v3.5 pdns-recursor 4.0.9-r0 —

Advisories 11

References