DeutschShown in its original language — a full translation is planned for a future version.
PowerDNS: Mehrere Schwachstellen
view advisory published 2020-09-22
Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in PowerDNS ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen oder potenziell beliebigen Code zur Ausführung zu bringen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-24698US | critical9.8 | — | ||
An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker might be able to cause a double-free… | ||||
| CVE-2020-24697US | high7.5 | — | ||
An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can cause a denial of service by sen… | ||||
| CVE-2020-24696US | high8.1 | — | ||
An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can trigger a race condition leading… | ||||
| CVE-2020-17482US | medium4.3 | — | ||
An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the cont… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2020:2718-1 vom 2020-09-23external
- SUSE Security Update SUSE-SU-2020:2785-1 vom 2020-09-29external
- PowerDNS Security Advisory vom 2020-09-22external
- PowerDNS Security Advisory vom 2020-09-22external
- Gentoo Linux Security Advisory GLSA-202012-18 vom 2020-12-23external
- Ubuntu Security Notice USN-7203-1 vom 2025-01-14external
- WID-SEC-W-2025-0058 - CSAF Versionself
- WID-SEC-2025-0058 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan