{"id":"CVE-2018-1000003","aliases":["DEBIAN-CVE-2018-1000003","EUVD-2018-1775","GHSA-vm3q-6vgq-8qhr","MGASA-2018-0252","UBUNTU-CVE-2018-1000003","openSUSE-SU-2018:0953-1","openSUSE-SU-2024:11157-1"],"status":"published","title":"Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow...","description":"Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.","severity":{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01287,"percentile":0.70551,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2018-01-22T18:00:00Z","modified":"2026-10-24T10:30:37Z","fixes":[{"ecosystem":"Debian:12","package":"pdns-recursor","fixed_in":["4.1.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pdns-recursor","fixed_in":["4.1.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pdns-recursor","fixed_in":["4.1.1-1"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"pdns-recursor","fixed_in":["4.1.2-3.mga6"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP1","package":"pdns-recursor","fixed_in":["4.1.2-5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-1"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-3.mga6"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.5-1.3"}]}],"bundled":18}],"products":[{"vendor":"powerdns","product":"recursor"}],"references":[{"url":"https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-01.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000003"},{"url":"https://github.com/advisories/GHSA-vm3q-6vgq-8qhr"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-1000003","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0252.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22935","tags":["report"]},{"url":"https://blog.powerdns.com/2018/03/29/powerdns-recursor-4-1-2-released/","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-04/msg00033.html","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-1000003","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000003","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1069242","tags":["report"]},{"url":"https://bugzilla.suse.com/1077154","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25829","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-1000003","description":"Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.","status":"published","published":"2018-01-22T18:00:00Z","modified":"2024-08-05T12:33:48.549Z","updated_at":"2026-11-02T14:35:10.685174Z"}],"euvd":[{"id":"EUVD-2018-1775","description":"Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.","status":"published","published":"2018-01-22T18:00:00Z","modified":"2024-08-05T12:33:48Z","updated_at":"2026-11-03T02:39:27.400094Z"}],"ghsa":[{"id":"GHSA-vm3q-6vgq-8qhr","title":"Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow...","description":"Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.","status":"published","published":"2022-05-14T03:46:12Z","modified":"2023-02-03T05:00:33Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:52:48.49301Z"}],"nvd":[{"id":"CVE-2018-1000003","description":"Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.","status":"published","published":"2018-01-22T18:29:00.29Z","modified":"2026-06-17T01:32:11.103Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:04:22.309028Z"}],"osv":[{"id":"CVE-2018-1000003","description":"Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.","status":"published","published":"2018-01-22T18:29:00.29Z","modified":"2026-10-24T10:30:37.401227925Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:44:07.192756Z"},{"id":"DEBIAN-CVE-2018-1000003","description":"Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.","status":"published","published":"2018-01-22T18:29:00.29Z","modified":"2026-10-23T18:02:55.587622903Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"UBUNTU-CVE-2018-1000003","description":"Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.","status":"withdrawn","published":"2018-01-22T18:29:00Z","modified":"2025-07-17T16:54:20Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"MGASA-2018-0252","title":"Updated pdns-recursor package fixes security vulnerability","description":"An issue has been found in the DNSSEC validation component of PowerDNS\nRecursor, allowing an ancestor delegation NSEC or NSEC3 record to be\nused to wrongfully prove the non-existence of a RR below the owner name\nof that record. This would allow an attacker in position of\nman-in-the-middle to send a NXDOMAIN answer for a name that does exist\n(CVE-2018-1000003).\n","status":"published","published":"2018-05-24T16:30:31Z","modified":"2026-04-16T06:23:30.310049673Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2018:0953-1","title":"Security update for pdns-recursor","description":"This update for pdns-recursor fixes the following issues:\n\n- update to 4.1.2\n  - New Features\n    - #6344: Add FFI version of gettag().\n  - Improvements\n    - #6298, #6303, #6268, #6290: Add the option to set the AXFR\n      timeout for RPZs.\n    - #6172: IXFR: correct behavior of dealing with DNS Name with\n      multiple records and speed up IXFR transaction (Leon Xu).\n    - #6379: Add RPZ statistics endpoint to the API.\n  - Bug Fixes\n    - #6336, #6293, #6237: Retry loading RPZ zones from server when\n      they fail initially.\n    - #6300: Fix ECS-based cache entry refresh code.\n    - #6320: Fix ECS-specific NS AAAA not being returned from the\n      cache.\n\n- update to version 4.1.1:\n  + Fixes security vulnerability where man-in-the-middle to send\n    a NXDOMAIN answer for a DNSSEC name that does exist.\n    (boo#1077154, CVE-2018-1000003)\n  + Don't validate signature for 'glue' CNAME, since anything else\n    than the initial CNAME can’t be considered authoritative.\n\n- update to version 4.0.7: (boo#1069242)","status":"published","published":"2018-04-16T15:14:46Z","modified":"2026-02-04T02:30:59.616709Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:11157-1","title":"pdns-recursor-4.5.5-1.3 on GA media","description":"These are all security issues fixed in the pdns-recursor-4.5.5-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:57:58.848357Z","updated_at":"2026-11-02T16:58:34.894275Z"}]}}