The remote host is affected by the vulnerability described in GLSA-201412-33 (PowerDNS Recursor: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in PowerDNS Recursor.
      Please review the CVE identifiers and PowerDNS blog post referenced below       for details.
  Impact :

    A remote attacker may be able to send specially crafted packets,       possibly resulting in arbitrary code execution or a Denial of Service       condition. Furthermore, a remote attacker may be able to spoof DNS data.
  Workaround :

    There is no known workaround at this time.

PowerDNS Security Advisory reports :

PowerDNS Recursor up to and including 3.1.7.1 can be brought down and probably exploited.

PowerDNS Recursor up to and including 3.1.7.1 can be spoofed into accepting bogus data

This update of pdns-rucursor improves the packet parsing code to fix a possible DNS spoofing vulnerability (CVE-2009-4010) and a remote buffer overflow that could give the ability to execute arbitrary code (CVE-2009-4009).

Update to upstream version 3.1.7.2.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version number, the version of the PowerDNS Recursor listening on the remote host is version 3.x prior to 3.1.7.2. It is, therefore, affected by multiple vulnerabilities :

  - A buffer overflow condition exists that allows a remote   	attacker, via crafted packets, to cause a daemon crash,   	resulting in a denial of service condition.
  	(CVE-2009-4009)

  - An unspecified flaw exists that allows a remote attacker   	to spoof DNS data via crafted zones. (CVE-2009-4010)

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

It was discovered that pdns-recursor, the PowerDNS recursive name server, contains several vulnerabilities :

  - CVE-2009-4009     A buffer overflow can be exploited to crash the daemon,     or potentially execute arbitrary code.

  - CVE-2009-4010     A cache poisoning vulnerability may allow attackers to     trick the server into serving incorrect DNS data.

ID	Name	Product	Family	Published	Updated	Severity
80210	GLSA-201412-33 : PowerDNS Recursor: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	12/23/2014	1/6/2021	critical
43847	FreeBSD : powerdns-recursor -- multiple vulnerabilities (dd8f2394-fd08-11de-b425-00215c6a37bb)	Nessus	FreeBSD Local Security Checks	1/11/2010	1/6/2021	critical
44610	openSUSE Security Update : pdns-recursor (pdns-recursor-1945)	Nessus	SuSE Local Security Checks	2/15/2010	1/14/2021	critical
44885	Fedora 11 : pdns-recursor-3.1.7.2-1.fc11 (2010-0209)	Nessus	Fedora Local Security Checks	2/25/2010	1/11/2021	critical
87950	PowerDNS Recursor 3.x < 3.1.7.2 Multiple Vulnerabilities	Nessus	DNS	1/15/2016	7/26/2018	critical
44833	Debian DSA-1968-1 : pdns-recursor - several vulnerabilities	Nessus	Debian Local Security Checks	2/24/2010	1/4/2021	critical
44615	openSUSE Security Update : pdns-recursor (pdns-recursor-1945)	Nessus	SuSE Local Security Checks	2/15/2010	1/14/2021	critical
44619	openSUSE Security Update : pdns-recursor (pdns-recursor-1945)	Nessus	SuSE Local Security Checks	2/15/2010	1/14/2021	critical
44888	Fedora 12 : pdns-recursor-3.1.7.2-1.fc12 (2010-0228)	Nessus	Fedora Local Security Checks	2/25/2010	1/11/2021	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical