{"schemaVersion":3,"id":"MGASA-2019-0051","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated pdns-recursor package fixes security vulnerabilities\n\nAn issue has been found in PowerDNS Recursor where Lua hooks are not\nproperly applied to queries received over TCP in some specific\ncombination of settings, possibly bypassing security policies enforced\nusing Lua (CVE-2019-3806).\n\nAn issue has been found in PowerDNS Recursor where records in the answer\nsection of responses received from authoritative servers with the AA\nflag not set were not properly validated, allowing an attacker to bypass\nDNSSEC validation (CVE-2019-3807).","dates":{"published":"2019-01-23T15:50:09.000Z","modified":"2026-04-16T04:44:06.447Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"pdns-recursor","name":"pdns-recursor","label":"pdns-recursor","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/pdns-recursor","purlType":"rpm","versions":[{"text":"< 4.1.9-1.mga6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.9-1.mga6","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2019-0051.html","label":"advisories.mageia.org/MGASA-2019-0051.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24218","label":"bugs.mageia.org/show_bug.cgi?id=24218","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2019-01.html","label":"docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2019-01.html","hostname":"docs.powerdns.com","tags":["Advisory"]},{"url":"https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2019-02.html","label":"docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2019-02.html","hostname":"docs.powerdns.com","tags":["Advisory"]}],"lineage":{"upstream":["CVE-2019-3806","CVE-2019-3807"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2019-01-23T15:50:09.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T04:44:06.447Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T08:35:31.818Z","stale":false,"partial":false}}