UBUNTU-CVE-2018-14644
Advisory lineage Upstream: 1 Downstream: 1
Upstream
Downstream
Published: 09 Nov 2018, 19:29
Last modified:04 Feb 2026, 03:42
Vulnerability Summary
Overall Risk (default)
low
21/100 CVSS Score
5.3 MEDIUM
3.0 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
09 Nov 2018, 19:29
Published
Vulnerability first disclosed
04 Feb 2026, 03:42
Last Modified
Vulnerability information updated
Description
An issue has been found in PowerDNS Recursor from 4.0.0 up to and including 4.1.4. A remote attacker sending a DNS query for a meta-type like OPT can lead to a zone being wrongly cached as failing DNSSEC validation. It only arises if the parent zone is signed, and all the authoritative servers for that parent zone answer with FORMERR to a query for at least one of the meta-types. As a result, subsequent queries from clients requesting DNSSEC validation will be answered with a ServFail.
CVSS Metrics
- v3.0•MEDIUM•Score: 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Systems
- ubuntu•pdns-recursor
< 4.0.0~alpha2-2ubuntu0.1+esm1 | < 4.1.1-2ubuntu0.1~esm1