An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7203-1 advisory.

    Wei Hao discovered that PowerDNS Authoritative Server incorrectly handled memory when accessing certain     files. An attacker could possibly use this issue to achieve arbitrary code execution. (CVE-2018-1046)

    It was discovered that PowerDNS Authoritative Server and PowerDNS Recursor incorrectly handled memory when     receiving certain remote input. An attacker could possibly use this issue to cause denial of service.
    (CVE-2018-10851)

    Kees Monshouwer discovered that PowerDNS Authoritative Server and PowerDNS Recursor incorrectly handled     request validation after having cached malformed input. An attacker could possibly use this issue to cause     denial of service. (CVE-2018-14626)

    Toshifumi Sakaguchi discovered that PowerDNS Recursor incorrectly handled requests after having cached     malformed input. An attacker could possibly use this issue to cause denial of service. (CVE-2018-14644)

    Nathaniel Ferguson discovered that PowerDNS Authoritative Server incorrectly handled memory when receiving     certain remote input. An attacker could possibly use this issue to obtain sensitive information.
    (CVE-2020-17482)

    Nicolas Dehaine and Dmitry Shabanov discovered that PowerDNS Authoritative Server and PowerDNS Recursor     incorrectly handled IXFR requests in certain circumstances. An attacker could possibly use this issue to     cause denial of service. (CVE-2022-27227)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202012-18 (PowerDNS: information disclosure)

    It was discovered that PowerDNS did not properly handle certain unknown       records.
  Impact :

    An authorized attacker with the ability to insert crafted records into a       zone might be able to leak the content of uninitialized memory. Crafted       records cannot be inserted via AXFR.
  Workaround :

    Do not take zone data from untrusted users.

- Update to 4.3.1

  - PowerDNS Security Advisory 2020-05 (CVE-2020-17482)

Release notes:
https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.3.1

Security Advisory:
https://docs.powerdns.com/authoritative/security-advisories/powerdns-a dvisory-2020-05.html

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for pdns fixes the following issues :

&#9; - Build with libmaxminddb instead of the obsolete GeoIP (boo#1156196)

  - CVE-2020-17482: Fixed an error that can result in     leaking of uninitialised memory through crafted zone     records (boo#1176535)

  - Backported compilation fix vs. latest Boost 1.74     (boo#1176312)

PowerDNS Team reports

CVE-2020-17482: An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory. Such a user could be a customer inserting data via a control panel, or somebody with access to the REST API.
Crafted records cannot be inserted via AXFR.

ID	Name	Product	Family	Severity
214098	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : PowerDNS vulnerabilities (USN-7203-1)	Nessus	Ubuntu Local Security Checks	high
144588	GLSA-202012-18 : PowerDNS: information disclosure	Nessus	Gentoo Local Security Checks	medium
141274	Fedora 33 : pdns (2020-7b1541266c)	Nessus	Fedora Local Security Checks	medium
141142	Fedora 32 : pdns (2020-7e9234058f)	Nessus	Fedora Local Security Checks	medium
141076	openSUSE Security Update : pdns (openSUSE-2020-1556)	Nessus	SuSE Local Security Checks	medium
140938	FreeBSD : powerdns -- Leaking uninitialised memory through crafted zone records (b371db92-fe34-11ea-b90e-6805ca2fa271)	Nessus	FreeBSD Local Security Checks	medium

Detections

Analytics

CVE-2020-17482

medium

Tenable Plugins

high

medium

medium

medium

medium

medium