OPENSUSE-SU-2019:1904-1: pdns&distro=openSUSE Leap 15.0
Vulnerability summary
OPENSUSE-SU-2019:1904-1 is a vulnerability in pdns&distro=openSUSE Leap 15.0 with no CVSS score yet.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 15-08-2019PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for pdns This update for pdns fixes the following issues: Security issues fixed: - CVE-2019-10203: Updated PostgreSQL schema to address a possible denial of service by an authorized user by inserting a crafted record in a MASTER type zone under their control. (boo#1142810) - CVE-2019-10162: Fixed a denial of service but when authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. (boo#1138582) - CVE-2019-10163: Fixed a denial of service of slave server when an authorized master server sends large number of NOTIFY messages. (boo#1138582) Non-security issues fixed: - Enabled the option to disable superslave support. - Fixed `pdnsutil b2b-migrate` to not lose NSEC3 settings.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Opensuse2 products
- pdns&distro=openSUSE Leap 15.0< 4.1.2-bp150.2.9.1
- pdns&distro=openSUSE Leap 15.1< 4.1.2-bp150.2.9.1
Suse2 products
- pdns&distro=SUSE Package Hub 12 SP1< 4.1.2-bp150.2.9.1
- pdns&distro=SUSE Package Hub 15< 4.1.2-bp150.2.9.1
2 vendors · 4 products
References
6 links- lists.opensuse.org/archives/…Advisory