An issue was discovered in PowerDNS Authoritative through 4.3.0 when –enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can cause a denial of service by sending crafted queries with a GSS-TSIG signature.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Authoritative | Powerdns | * | 4.3.0 (including) |
| Pdns | Ubuntu | bionic | * |
| Pdns | Ubuntu | groovy | * |
| Pdns | Ubuntu | hirsute | * |
| Pdns | Ubuntu | impish | * |
| Pdns | Ubuntu | kinetic | * |
| Pdns | Ubuntu | lunar | * |
| Pdns | Ubuntu | mantic | * |
| Pdns | Ubuntu | trusty | * |
| Pdns | Ubuntu | xenial | * |