Detections
Analytics

Alpine: multiple pdns packages: security update to 4.0.7-r0

high Tenable Self-Hosted Container Security Plugin ID 406236

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient
 validation of data coming from the user when building a HTTP request from a DNS query in the HTTP
 Connector of the Remote backend, allowing a remote user to cause a denial of service by making the server
 connect to an invalid endpoint, or possibly information disclosure by making the server connect to an
 internal endpoint and somehow extracting meaningful information about the response (CVE-2019-3871)

See Also

https://security.alpinelinux.org/vuln/CVE-2019-3871

Plugin Details

Severity: High

ID: 406236

Version: Revision 1.25

Type: Local

Published: 10/31/2023

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 57.12

CVSS v2

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.1

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS Score Source: CVE-2019-3871

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 3/18/2019

Reference Information

CVE: CVE-2019-3871

BID: 107491