PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when     encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS.
    (CVE-2019-10203)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when
    encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS.
    (CVE-2019-10203)

This update for pdns fixes the following issues :

Security issues fixed :

  - CVE-2019-10203: Updated PostgreSQL schema to address a     possible denial of service by an authorized user by     inserting a crafted record in a MASTER type zone under     their control. (boo#1142810)

  - CVE-2019-10162: Fixed a denial of service but when     authorized user to cause the server to exit by inserting     a crafted record in a MASTER type zone under their     control. (boo#1138582)

  - CVE-2019-10163: Fixed a denial of service of slave     server when an authorized master server sends large     number of NOTIFY messages. (boo#1138582) &#9;
    Non-security issues fixed :

  - Enabled the option to disable superslave support.

  - Fixed `pdnsutil b2b-migrate` to not lose NSEC3 settings.

ID	Name	Product	Family	Severity
258157	Linux Distros Unpatched Vulnerability : CVE-2019-10203	Nessus	Misc.	medium
406239	Alpine: multiple pdns packages: security update to 4.1.11-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
406239	Alpine: multiple pdns packages: security update to 4.1.11-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
127996	openSUSE Security Update : pdns (openSUSE-2019-1904)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2019-10203

medium

Tenable Plugins

medium

medium

medium

high