An issue was discovered in PowerDNS Authoritative through 4.3.0 when –enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can cause a denial of service by sending crafted queries with a GSS-TSIG signature.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Authoritative | Powerdns | * | 4.3.0 (including) |
Pdns | Ubuntu | bionic | * |
Pdns | Ubuntu | groovy | * |
Pdns | Ubuntu | hirsute | * |
Pdns | Ubuntu | impish | * |
Pdns | Ubuntu | kinetic | * |
Pdns | Ubuntu | lunar | * |
Pdns | Ubuntu | mantic | * |
Pdns | Ubuntu | trusty | * |
Pdns | Ubuntu | xenial | * |