CVE-2019-3806

CVSS 5.4 MEDIUMEPSS 1.5%CWE-358

An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua.

CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H

Produtos afetados

Power DNS · pdns-recursor

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3806 https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2019-01.html