Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted packets.

According to its self-reported version number, the version of the PowerDNS Recursor listening on the remote host is version 3.x prior to 3.1.7.2. It is, therefore, affected by multiple vulnerabilities :

  - A buffer overflow condition exists that allows a remote   	attacker, via crafted packets, to cause a daemon crash,   	resulting in a denial of service condition.
  	(CVE-2009-4009)

  - An unspecified flaw exists that allows a remote attacker   	to spoof DNS data via crafted zones. (CVE-2009-4010)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201412-33 (PowerDNS Recursor: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in PowerDNS Recursor.
      Please review the CVE identifiers and PowerDNS blog post referenced below       for details.
  Impact :

    A remote attacker may be able to send specially crafted packets,       possibly resulting in arbitrary code execution or a Denial of Service       condition. Furthermore, a remote attacker may be able to spoof DNS data.
  Workaround :

    There is no known workaround at this time.

Update to upstream version 3.1.7.2.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that pdns-recursor, the PowerDNS recursive name server, contains several vulnerabilities :

  - CVE-2009-4009     A buffer overflow can be exploited to crash the daemon,     or potentially execute arbitrary code.

  - CVE-2009-4010     A cache poisoning vulnerability may allow attackers to     trick the server into serving incorrect DNS data.

This update of pdns-rucursor improves the packet parsing code to fix a possible DNS spoofing vulnerability (CVE-2009-4010) and a remote buffer overflow that could give the ability to execute arbitrary code (CVE-2009-4009).

PowerDNS Security Advisory reports :

PowerDNS Recursor up to and including 3.1.7.1 can be brought down and probably exploited.

PowerDNS Recursor up to and including 3.1.7.1 can be spoofed into accepting bogus data

ID	Name	Product	Family	Severity
87950	PowerDNS Recursor 3.x < 3.1.7.2 Multiple Vulnerabilities	Nessus	DNS	critical
80210	GLSA-201412-33 : PowerDNS Recursor: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
44888	Fedora 12 : pdns-recursor-3.1.7.2-1.fc12 (2010-0228)	Nessus	Fedora Local Security Checks	critical
44885	Fedora 11 : pdns-recursor-3.1.7.2-1.fc11 (2010-0209)	Nessus	Fedora Local Security Checks	critical
44833	Debian DSA-1968-1 : pdns-recursor - several vulnerabilities	Nessus	Debian Local Security Checks	critical
44619	openSUSE Security Update : pdns-recursor (pdns-recursor-1945)	Nessus	SuSE Local Security Checks	critical
44615	openSUSE Security Update : pdns-recursor (pdns-recursor-1945)	Nessus	SuSE Local Security Checks	critical
44610	openSUSE Security Update : pdns-recursor (pdns-recursor-1945)	Nessus	SuSE Local Security Checks	critical
43847	FreeBSD : powerdns-recursor -- multiple vulnerabilities (dd8f2394-fd08-11de-b425-00215c6a37bb)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2009-4009

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical