OPENSUSE-SU-2020:0698-1: pdns-recursor&distro=openSUSE Leap 15.1
Vulnerability summary
OPENSUSE-SU-2020:0698-1 is a vulnerability in pdns-recursor&distro=openSUSE Leap 15.1 with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 23-05-2020PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for pdns-recursor This update for pdns-recursor fixes the following issues: - update to 4.1.16 * fixes an issue where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated (CVE-2020-12244, boo#1171553) * fixes an issue where invalid hostname on the server can result in disclosure of invalid memory (CVE-2020-10030, boo#1171553) * fixes an issue in the DNS protocol has been found that allows malicious parties to use recursive DNS services to attack third party authoritative name servers (CVE-2020-10995, boo#1171553) For details see https://doc.powerdns.com/recursor/changelog/4.1.html#change-4.1.16
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- pdns-recursor&distro=SUSE Package Hub 12 SP1< 4.1.12-bp151.4.3.1
- pdns-recursor&distro=SUSE Package Hub 15 SP1< 4.1.12-bp151.4.3.1
Opensuse1 product
- pdns-recursor&distro=openSUSE Leap 15.1< 4.1.12-bp151.4.3.1
2 vendors · 3 products
References
5 links- lists.opensuse.org/archives/…Advisory