A vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.10, 4.0.8 allowing an authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. The issue is due to the fact that the Authoritative Server will exit when it runs into a parsing error while looking up the NS/A/AAAA records it is about to use for an outgoing notify.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-bind" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-bind-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-geoip" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-geoip-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-ldap" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-ldap-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-lua" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-lua-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-mydns" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-mydns-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-mysql" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-mysql-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-odbc" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-odbc-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-opendbx" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-opendbx-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-pgsql" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-pgsql-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-pipe" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-pipe-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-remote" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-remote-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-sqlite3" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-sqlite3-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-tinydns" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-backend-tinydns-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-server" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-server-dbgsym" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-tools" }, { "binary_version": "4.1.6-3build1", "binary_name": "pdns-tools-dbgsym" } ] }