CVE-2022-27227

Description

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.

References

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJSKICB67SPPEGNXCQLZVSWR6QGCN3KP/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPHOFNI7FKM5NNOVDOWO4TBXFAFICCUE/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HEABZA46XYEUWMGSY2GYYVHISBVWEHIO/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2QKN56VWXUVFOYGUN75N5IRNK66OHTHT/

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2022-01.html

https://docs.powerdns.com/recursor/security-advisories/index.html

https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2022-01.html

https://doc.powerdns.com/authoritative/security-advisories/index.html

http://www.openwall.com/lists/oss-security/2022/03/25/1

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3