There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS
    query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache
    lookup, possibly leading to a crash. (CVE-2018-16855)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to
    4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can
    lead to remote denial of service. (CVE-2018-10851)

  - PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4
    inclusive are vulnerable to a packet cache pollution via crafted query that can lead to denial of service.
    (CVE-2018-14626)

  - An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker
    sending a DNS query for a meta-type like OPT can lead to a zone being wrongly cached as failing DNSSEC
    validation. It only arises if the parent zone is signed, and all the authoritative servers for that parent
    zone answer with FORMERR to a query for at least one of the meta-types. As a result, subsequent queries
    from clients requesting DNSSEC validation will be answered with a ServFail. (CVE-2018-14644)

  - An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS
    query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache
    lookup, possibly leading to a crash. (CVE-2018-16855)

Fixes CVE-2018-16855 (Crafted query can cause a denial of service)

----

New upstream release with security fixes for CVE-2018-10851, CVE-2018-14626 and CVE-2018-14644

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for pdns-recursor fixes the following issues :

Security issues fixed :

  - CVE-2018-10851: Fixed denial of service via crafted zone     record or crafted answer (bsc#1114157).

  - CVE-2018-14644: Fixed denial of service via crafted     query for meta-types (bsc#1114170).

  - CVE-2018-14626: Fixed packet cache pollution via crafted     query (bsc#1114169).

  - CVE-2018-16855: Fixed case where a crafted query could     cause a denial of service (bsc#1116592)

powerdns Team reports :

CVE-2018-16855: An issue has been found in PowerDNS Recursor where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash. When the PowerDNS Recursor is run inside a supervisor like supervisord or systemd, a crash will lead to an automatic restart, limiting the impact to a somewhat degraded service.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS     query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache     lookup, possibly leading to a crash. (CVE-2018-16855)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
400604	Alpine: multiple pdns-recursor packages: security update to 4.1.7-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	8/16/2023	7/2/2026	high
406254	Alpine: multiple pdns-recursor packages: security update to 4.1.8-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
406254	Alpine: multiple pdns-recursor packages: security update to 4.1.8-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
400604	Alpine: multiple pdns-recursor packages: security update to 4.1.7-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	8/16/2023	7/2/2026	high
120858	Fedora 29 : pdns-recursor (2018-e14840a7f5)	Nessus	Fedora Local Security Checks	1/3/2019	6/28/2024	high
119738	openSUSE Security Update : pdns-recursor (openSUSE-2018-1565)	Nessus	SuSE Local Security Checks	12/18/2018	7/15/2024	high
119512	FreeBSD : powerdns-recursor -- Crafted query can cause a denial of service (f6d6308a-f2ec-11e8-b005-6805ca2fa271)	Nessus	FreeBSD Local Security Checks	12/10/2018	7/16/2024	high
123405	openSUSE Security Update : pdns-recursor (openSUSE-2019-988)	Nessus	SuSE Local Security Checks	3/27/2019	6/7/2024	high
247772	Linux Distros Unpatched Vulnerability : CVE-2018-16855	Nessus	Misc.	8/10/2025	7/24/2026	high
120764	Fedora 28 : pdns-recursor (2018-c341b70641)	Nessus	Fedora Local Security Checks	1/3/2019	7/1/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high