An issue was discovered in PowerDNS Authoritative through 4.3.0 when –enable-experimental-gss-tsig is used. A remote, unauthenticated attacker might be able to cause a double-free, leading to a crash or possibly arbitrary code execution. by sending crafted queries with a GSS-TSIG signature.
Weakness
The product calls free() twice on the same memory address.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Authoritative | Powerdns | * | 4.3.0 (including) |
| Pdns | Ubuntu | bionic | * |
| Pdns | Ubuntu | groovy | * |
| Pdns | Ubuntu | hirsute | * |
| Pdns | Ubuntu | impish | * |
| Pdns | Ubuntu | kinetic | * |
| Pdns | Ubuntu | lunar | * |
| Pdns | Ubuntu | mantic | * |
| Pdns | Ubuntu | trusty | * |
| Pdns | Ubuntu | xenial | * |