Description
A Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8 allowing a remote, authorized master server to cause a high CPU load or even prevent any further updates to any slave zone by sending a large number of NOTIFY messages. Note that only servers configured as slaves are affected by this issue.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
PowerDNS pdns
fixed in 4.1.9affectedfixed in 4.0.8affected
References
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00036.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00054.html ↗
- https://blog.powerdns.com/2019/06/21/powerdns-authoritative-server-4-0-8-and-4-1-10-released/ ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10163 ↗
- https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-05.html ↗