{"id":"CVE-2018-10851","aliases":["DEBIAN-CVE-2018-10851","EUVD-2018-2920","GHSA-v52v-2q9p-gp4x","MGASA-2019-0008","MGASA-2019-0009","SUSE-RU-2019:0863-1","SUSE-SU-2019:0863-1","SUSE-SU-2020:1066-1","UBUNTU-CVE-2018-10851","USN-7203-1","openSUSE-SU-2018:4062-1","openSUSE-SU-2018:4073-1","openSUSE-SU-2018:4175-1","openSUSE-SU-2018:4177-1","openSUSE-SU-2024:11156-1","openSUSE-SU-2024:11157-1"],"status":"published","title":"PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor...","description":"PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.06041,"percentile":0.93417,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-772"],"published":"2018-11-29T18:00:00Z","modified":"2026-10-24T10:30:30Z","fixes":[{"ecosystem":"Debian:12","package":"pdns","fixed_in":["4.1.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pdns","fixed_in":["4.1.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pdns","fixed_in":["4.1.5-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"pdns-recursor","fixed_in":["4.1.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pdns-recursor","fixed_in":["4.1.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pdns-recursor","fixed_in":["4.1.7-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns","fixed_in":["4.0.0~alpha2-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns-recursor","fixed_in":["4.0.0~alpha2-2ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns","fixed_in":["4.1.1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns-recursor","fixed_in":["4.1.1-2ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.7-1"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.8-1.mga6"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.1","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1.21-2.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-5.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"py26-compat-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.10-1.19.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.8.15-2.32.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-branding","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.2.17-2.31.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.46.19-2.41.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.10.11-2.23.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1.21-2.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"subscription-matcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22-4.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.19-2.34.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-10.29.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager-frontend-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-3.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.21-2.36.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"tika-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20-1.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 3.1","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1.21-2.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.6-5.25.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"py26-compat-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2016.11.10-1.19.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.8.15-2.32.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-branding","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.2.17-2.31.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.46.19-2.41.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.10.11-2.23.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.1.21-2.35.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"subscription-matcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.22-4.9.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.19-2.34.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-10.29.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager-frontend-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-3.10.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.21-2.36.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 3.1","package":"tika-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20-1.6.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1583432621.24fa60e-3.70.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1585152761.8ef3d61-4.33.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1583944923.03cca6c-3.31.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1583944894.38f023a-3.24.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-mq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1583944811.dc14403-3.19.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1584715262.e4ea620-3.39.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1585171918.418f5cf-3.26.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"ardana-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1585311051.6ab5488-3.33.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-operations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-opsconsole","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-planning","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"documentation-hpe-helion-openstack-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.17-3.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-3.26.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-manila-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-3.26.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev63-3.30.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev63-3.30.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev61-3.35.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev61-3.35.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-3.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"python-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-3.9.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-aodh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev7-12.24.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2~dev3-12.25.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev7-12.22.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-14.25.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev7-12.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-freezer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0.0~xrc2~dev2-10.20.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.3~dev3-12.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-12.25.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-12.25.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-11.26.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2_5.0.2_5.0.2~dev31-11.24.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-12.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1_1.5.1_1.5.1~dev3-8.20.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-murano","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2~dev2-12.20.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev63-13.28.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev61-11.26.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-12.25.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-11.24.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"venv-openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-11.24.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"zookeeper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-3.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1583432621.24fa60e-3.70.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1585152761.8ef3d61-4.33.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1583944923.03cca6c-3.31.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-monasca","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1583944894.38f023a-3.24.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-mq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1583944811.dc14403-3.19.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1584715262.e4ea620-3.39.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1585171918.418f5cf-3.26.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"ardana-tempest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0+git.1585311051.6ab5488-3.33.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-installation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-operations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-opsconsole","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-planning","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-supplement","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-upstream-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-upstream-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"documentation-suse-openstack-cloud-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.17-3.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-3.26.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-manila-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-3.26.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev63-3.30.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev63-3.30.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev61-3.35.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev61-3.35.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-3.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"python-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-3.9.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-aodh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev7-12.24.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-barbican","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2~dev3-12.25.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev7-12.22.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-cinder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.2.3~dev23-14.25.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-designate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.3~dev7-12.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-freezer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0.0~xrc2~dev2-10.20.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-glance","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.0.3~dev3-12.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-heat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.8~dev22-12.25.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1.8~dev8-12.25.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-keystone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.4~dev5-11.26.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-magnum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.2_5.0.2_5.0.2~dev31-11.24.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-12.29.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-monasca-ceilometer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.1_1.5.1_1.5.1~dev3-8.20.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-murano","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.2~dev2-12.20.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev63-13.28.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev61-11.26.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-octavia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.6~dev3-12.25.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-sahara","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.5~dev4-11.24.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"venv-openstack-trove","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.2~dev2-11.24.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"zookeeper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-3.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0+git.1585575551.16781d00d-3.38.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-ha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0+git.1585316176.344190f-3.32.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"crowbar-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0+git.1585304226.2164b7895-4.37.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"documentation-suse-openstack-cloud-deployment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"documentation-suse-openstack-cloud-supplement","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"documentation-suse-openstack-cloud-upstream-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"documentation-suse-openstack-cloud-upstream-user","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.20200319-1.23.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.17-3.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-manila","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-3.26.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-manila-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1~dev5-3.26.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-neutron","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev63-3.30.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-neutron-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.9~dev63-3.30.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev61-3.35.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-nova-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.1.9~dev61-3.35.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"python-amqp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-3.9.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.0-3.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"zookeeper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.10-3.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0~alpha2-3ubuntu0.1~esm1"}]}],"versions":["3.4.5-1build2","3.4.6-2","3.4.6-3","3.4.7-1","3.4.7-2","4.0.0~alpha1-1","4.0.0~alpha2-2","4.0.0~alpha2-3","4.0.0~alpha2-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0~alpha2-2ubuntu0.1+esm1"}]}],"versions":["3.7.3-1","4.0.0~alpha1-1","4.0.0~alpha1-2","4.0.0~alpha2-2","4.0.0~alpha2-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-1ubuntu0.1~esm1"}]}],"versions":["4.0.4-2","4.0.4-2build1","4.0.5-1","4.1.0-1","4.1.0-2","4.1.0-2build1","4.1.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-2ubuntu0.1~esm1"}]}],"versions":["4.0.6-1","4.0.6-1build1","4.0.7-1","4.1.1-1","4.1.1-1build1","4.1.1-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0~alpha2-3ubuntu0.1~esm1"}]}],"versions":["3.4.5-1build2","3.4.6-2","3.4.6-3","3.4.7-1","3.4.7-2","4.0.0~alpha1-1","4.0.0~alpha2-2","4.0.0~alpha2-3","4.0.0~alpha2-3build1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0~alpha2-2ubuntu0.1+esm1"}]}],"versions":["3.7.3-1","4.0.0~alpha1-1","4.0.0~alpha1-2","4.0.0~alpha2-2","4.0.0~alpha2-2ubuntu0.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-1ubuntu0.1~esm1"}]}],"versions":["4.0.4-2","4.0.4-2build1","4.0.5-1","4.1.0-1","4.1.0-2","4.1.0-2build1","4.1.1-1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-2ubuntu0.1~esm1"}]}],"versions":["4.0.6-1","4.0.6-1build1","4.0.7-1","4.1.1-1","4.1.1-1build1","4.1.1-2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1ubuntu0.1~esm1"}]}],"versions":["4.1.6-3build1","4.2.0-1","4.2.1-1","4.2.1-1build1","4.2.1-1build2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1ubuntu0.1~esm1"}]}],"versions":["4.2.0-6","4.2.1-1","4.2.1-1build1","4.2.1-1build2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-1ubuntu0.1~esm1"}]}],"versions":["4.4.1-1build1","4.4.1-3","4.4.1-4","4.5.2-1build1","4.5.3-1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-1ubuntu1+esm1"}]}],"versions":["4.4.2-3","4.6.0-1ubuntu1"],"bundled":6},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.8-13.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-bp150.2.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-bp150.2.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-1.5"}]}],"bundled":16},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.5-1.3"}]}],"bundled":18}],"products":[{"vendor":"debian","product":"pdns"},{"vendor":"power dns","product":"pdns-recursor"},{"vendor":"powerdns","product":"authoritative"},{"vendor":"powerdns","product":"recursor"},{"vendor":"the powerdns project","product":"pdns"},{"vendor":"the powerdns project","product":"pdns-recursor"}],"references":[{"url":"https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-04.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-03.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10851","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10851"},{"url":"https://github.com/advisories/GHSA-v52v-2q9p-gp4x"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-10851","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0008.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23814","tags":["report"]},{"url":"https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2018-05.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/TNGUEM75M7JSLQMLIWGVO422ZTFUZWBD/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2019-0009.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23815","tags":["report"]},{"url":"https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-06.html","tags":["advisory"]},{"url":"https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-07.html","tags":["advisory"]},{"url":"https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2018-09.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/U5BJ2CLRPCLSDHOH3VAABZZP4GVKGLL5/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/-2019-863/suse-ru-20190863-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1109316","tags":["report"]},{"url":"https://bugzilla.suse.com/1111191","tags":["report"]},{"url":"https://bugzilla.suse.com/1111910","tags":["report"]},{"url":"https://bugzilla.suse.com/1114029","tags":["report"]},{"url":"https://bugzilla.suse.com/1114059","tags":["report"]},{"url":"https://bugzilla.suse.com/1114157","tags":["report"]},{"url":"https://bugzilla.suse.com/1114169","tags":["report"]},{"url":"https://bugzilla.suse.com/1117759","tags":["report"]},{"url":"https://bugzilla.suse.com/1119081","tags":["report"]},{"url":"https://bugzilla.suse.com/1119964","tags":["report"]},{"url":"https://bugzilla.suse.com/1121038","tags":["report"]},{"url":"https://bugzilla.suse.com/1121195","tags":["report"]},{"url":"https://bugzilla.suse.com/1121856","tags":["report"]},{"url":"https://bugzilla.suse.com/1122836","tags":["report"]},{"url":"https://bugzilla.suse.com/1123991","tags":["report"]},{"url":"https://bugzilla.suse.com/1124639","tags":["report"]},{"url":"https://bugzilla.suse.com/1126862","tags":["report"]},{"url":"https://bugzilla.suse.com/1128781","tags":["report"]},{"url":"https://bugzilla.suse.com/1129765","tags":["report"]},{"url":"https://bugzilla.suse.com/1130658","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17197","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190863-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201066-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1040519","tags":["report"]},{"url":"https://bugzilla.suse.com/1048688","tags":["report"]},{"url":"https://bugzilla.suse.com/1077718","tags":["report"]},{"url":"https://bugzilla.suse.com/1111180","tags":["report"]},{"url":"https://bugzilla.suse.com/1115904","tags":["report"]},{"url":"https://bugzilla.suse.com/1125357","tags":["report"]},{"url":"https://bugzilla.suse.com/1129734","tags":["report"]},{"url":"https://bugzilla.suse.com/1132852","tags":["report"]},{"url":"https://bugzilla.suse.com/1133817","tags":["report"]},{"url":"https://bugzilla.suse.com/1135773","tags":["report"]},{"url":"https://bugzilla.suse.com/1145498","tags":["report"]},{"url":"https://bugzilla.suse.com/1146206","tags":["report"]},{"url":"https://bugzilla.suse.com/1148426","tags":["report"]},{"url":"https://bugzilla.suse.com/1149110","tags":["report"]},{"url":"https://bugzilla.suse.com/1149535","tags":["report"]},{"url":"https://bugzilla.suse.com/1151206","tags":["report"]},{"url":"https://bugzilla.suse.com/1165402","tags":["report"]},{"url":"https://bugzilla.suse.com/1165643","tags":["report"]},{"url":"https://bugzilla.suse.com/1166290","tags":["report"]},{"url":"https://bugzilla.suse.com/1167240","tags":["report"]},{"url":"https://bugzilla.suse.com/144694","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-0201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-5247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-9543","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-10851","tags":["report"]},{"url":"https://downloads.powerdns.com/patches/2018-03/","tags":["report"]},{"url":"https://downloads.powerdns.com/patches/2018-04/","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10851","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7203-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-17482","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-27227","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FI4FFU4QQEWV74MZWYUFSQ5ZMXRGIH7G/#FI4FFU4QQEWV74MZWYUFSQ5ZMXRGIH7G","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1089814","tags":["report"]},{"url":"https://bugzilla.suse.com/1114170","tags":["report"]},{"url":"https://bugzilla.suse.com/1116592","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16855","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/U7JCGUVPUT2TOXOKR2SCHC43MFMZC52C/#U7JCGUVPUT2TOXOKR2SCHC43MFMZC52C","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/5HUOAHEJGZBU2UVFKSCQPX2U267R5ZBE/#5HUOAHEJGZBU2UVFKSCQPX2U267R5ZBE","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/M2UYXXO7I4TUSSSVHBOZEQKRR4SWMVXY/#M2UYXXO7I4TUSSSVHBOZEQKRR4SWMVXY","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17482","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15090","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15094","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25829","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-10851","description":"PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.","status":"published","published":"2018-11-29T18:00:00Z","modified":"2024-08-05T07:46:47.415Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:35:01.619448Z"}],"euvd":[{"id":"EUVD-2018-2920","description":"PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.","status":"published","published":"2018-11-29T18:00:00Z","modified":"2024-08-05T07:46:47Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T02:39:57.544825Z"}],"ghsa":[{"id":"GHSA-v52v-2q9p-gp4x","title":"PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor...","description":"PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.","status":"published","published":"2022-05-13T01:34:58Z","modified":"2023-02-01T05:08:33Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-772"],"updated_at":"2026-11-02T14:50:47.846536Z"}],"nvd":[{"id":"CVE-2018-10851","description":"PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.","status":"published","published":"2018-11-29T18:29:00.303Z","modified":"2026-06-17T01:34:45.683Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400","CWE-772"],"updated_at":"2026-11-02T14:04:48.987926Z"}],"osv":[{"id":"CVE-2018-10851","description":"PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.","status":"published","published":"2018-11-29T18:29:00.303Z","modified":"2026-10-24T10:30:30.539794324Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-10851","description":"PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.","status":"published","published":"2018-11-29T18:29:00.303Z","modified":"2026-10-23T18:02:57.621712245Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"UBUNTU-CVE-2018-10851","description":"PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.","status":"published","published":"2018-11-29T18:29:00Z","modified":"2026-02-04T04:32:45.634474Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"MGASA-2019-0008","title":"Updated pdns packages fix security vulnerabilities","description":"A vulnerability was in found in PowerDNS Authoritative Server. The issue\nis a memory leak occurring while parsing some malformed records, due to\nthe fact that some memory is allocated parsing a record and is not\nalways properly released if the record is not valid. It allows an\nauthorized user to cause a denial of service by inserting specially\ncrafted records in a zone under their control, then sending DNS queries\nfor that zone (CVE-2018-10851).\n\nAn issue has been found in PowerDNS Authoritative Server allowing a\nremote user to craft a DNS query that will cause an answer without\nDNSSEC records to be inserted into the packet cache and be returned to\nclients asking for DNSSEC records, thus hiding the presence of DNSSEC\nsignatures for a specific qname and qtype. For a DNSSEC-signed domain,\nthis means that DNSSEC validating clients will consider the answer to be\nbogus until it expires from the packet cache, leading to a denial of\nservice (CVE-2018-14626).\n","status":"published","published":"2019-01-05T18:30:16Z","modified":"2026-04-16T06:24:52.539646056Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"MGASA-2019-0009","title":"Updated pdns-recursor packages fix security vulnerabilities","description":"A vulnerability was in found in PowerDNS Recursor. The issue is a memory\nleak occurring while parsing some malformed records, due to the fact\nthat some memory is allocated parsing a record and is not always\nproperly released if the record is not valid. It allows a malicious auth\nserver to cause a denial of service by sending specially crafted records\nin response to a legitimate query by an authorized user (CVE-2018-10851).\n\nAn issue has been found in PowerDNS Recursor allowing a remote user to\ncraft a DNS query that will cause an answer without DNSSEC records to be\ninserted into the packet cache and be returned to clients asking for\nDNSSEC records, thus hiding the presence of DNSSEC signatures for a\nspecific qname and qtype. For a DNSSEC-signed domain, this means that\nclients performing DNSSEC validation by themselves might consider the\nanswer to be bogus until it expires from the packet cache, leading to a\ndenial of service (CVE-2018-14626).\n\nAn issue has been found in PowerDNS Recursor from 4.0.0 up to and\nincluding 4.1.4. A remote attacker sending a DNS query for a meta-type\nlike OPT can lead to a zone being wrongly cached as failing DNSSEC\nvalidation. It only arises if the parent zone is signed, and all the\nauthoritative servers for that parent zone answer with FORMERR to a\nquery for at least one of the meta-types. As a result, subsequent\nqueries from clients requesting DNSSEC validation will be answered with\na ServFail (CVE-2018-14644).\n\nAn issue has been found in PowerDNS Recursor where a remote attacker\nsending a DNS query can trigger an out-of-bounds memory read while\ncomputing the hash of the query for a packet cache lookup, possibly\nleading to a crash (CVE-2018-16855).\n","status":"published","published":"2019-01-05T18:30:16Z","modified":"2026-04-16T06:25:57.699134304Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2018:4062-1","title":"Security update for pdns-recursor","description":"This update for pdns-recursor to version 4.1.8 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer (bsc#1114157).\n- CVE-2018-14644: Fixed denial of service via crafted query for meta-types (bsc#1114170).\n- CVE-2018-14626: Fixed packet cache pollution via crafted query (bsc#1114169).\n- CVE-2018-16855: Fixed case where a crafted query could cause a denial of service (bsc#1116592)\n\nNon-security issues fixed:\n\n- Fixed build failure with Boost 1.67.0 (bsc#1089814).\n- Revert ‘Keep the EDNS status of a server on FormErr with EDNS’\n- Refuse queries for all meta-types\n\nFor more details about this update, refer to:\n  https://blog.powerdns.com/2018/11/26/powerdns-recursor-4-1-8-released/\n","status":"published","published":"2018-12-10T13:09:45Z","modified":"2026-02-04T02:15:49.537118Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2018:4073-1","title":"Security update for pdns","description":"This update for pdns fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer (bsc#1114157).\n- CVE-2018-14626: Fixed packet cache pollution via crafted query (bsc#1114169).\n","status":"published","published":"2018-12-11T14:12:15Z","modified":"2026-02-04T02:25:49.522266Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2018:4175-1","title":"Security update for pdns","description":"This update for pdns fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer (bsc#1114157).\n- CVE-2018-14626: Fixed packet cache pollution via crafted query (bsc#1114169).\n\nThis update was imported from the openSUSE:Leap:15.0:Update update project.","status":"published","published":"2018-12-18T12:04:47Z","modified":"2026-02-04T02:50:22.365662Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2018:4177-1","title":"Security update for pdns-recursor","description":"This update for pdns-recursor fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-10851: Fixed denial of service via crafted zone record or crafted answer (bsc#1114157).\n- CVE-2018-14644: Fixed denial of service via crafted query for meta-types (bsc#1114170).\n- CVE-2018-14626: Fixed packet cache pollution via crafted query (bsc#1114169).\n- CVE-2018-16855: Fixed case where a crafted query could cause a denial of service (bsc#1116592)\n\nThis update was imported from the openSUSE:Leap:15.0:Update update project.","status":"published","published":"2018-12-18T12:04:40Z","modified":"2026-02-04T04:15:43.667982Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:11156-1","title":"pdns-4.5.1-1.5 on GA media","description":"These are all security issues fixed in the pdns-4.5.1-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:39:47.285231Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11157-1","title":"pdns-recursor-4.5.5-1.3 on GA media","description":"These are all security issues fixed in the pdns-recursor-4.5.5-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:57:58.848357Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-RU-2019:0863-1","title":"Security update for SUSE Manager Server 3.1","description":"\nThis update fixes the following issues:\n\ncobbler:\n\n- Fixes case where distribution detection returns None (bsc#1130658)\n- SUSE texmode fix (bsc#1109316)\n- Fix for SUSE distribution detection in ISO building\n  (bsc#1123991)\n\npy26-compat-salt:\n\n- Remove arch from name when pkg.list_pkgs is called with 'attr' (bsc#1114029)\n\nspacecmd:\n\n- Fix importing state channels using configchannel_import\n- Fix getting file info for latest revision (via configchannel_filedetails)\n\nspacewalk-branding:\n\n- Update jquery.timepicker dependency to 1.11.14 to allow parsing\n  the time format without depending on the language. (bsc#1119081)\n\nspacewalk-java:\n\n- Fix a problem when cloning public child channels with a private base channel (bsc#1124639)\n- Keep assigned channels on traditional to minion migration (bsc#1122836)\n- Fix 'Add Selected to SSM' on System Groups -\u003e systems page (bsc#1121856)\n- Disable notification types with 'java.notifications_type_disabled' in rhn.conf (bsc#1111910)\n- XMLRPC API: Include init.sls in channel file list (bsc#1111191)\n- Fix the config channels assignment via SSM (bsc#1117759)\n\nspacewalk-utils:\n\n- Create /etc/rhn with correct ownership to prevent file conflicts\n\nspacewalk-web:\n\n- Fix action scheduler time picker prefill when the server is on  'UTC/GMT' timezone (bsc#1121195)\n- Fix initializing of the datetime picker (bsc#1126862)\n- Show feedback messages after using the retry option on the notification messages page\n\nsubscription-matcher:\n\n- Old style hard bundle merging fix (bsc#1114059)\n\nsusemanager:\n\n- Fix creation of bootstrap repositories for SLE12 (no SP) by requiring python-setuptools\n  only for SLE12 \u003e= SP1 (bsc#1129765)\n- Add `python-setuptools` package dependency to SLES12 bootstrap repo (bsc#1119964)\n- Rhnlib was renamed to python2-rhnlib. Change bootstrap data accordingly.\n\nsusemanager-schema:\n\n- Fix performance regression in inter-server-sync (bsc#1128781)\n\nsusemanager-docs_en:\n\n- Update text and image files\n- 2.1 comparison: clarify profile syncing support\n- Adjust documentation about notification settings\n- Fix internal link (SMT documentation).\n- Remove documentation about the 'mgr-sync enable-scc' subcommand.  This\n  subcommand is no longer available.\n\nsusemanager-frontend-libs:\n\n- Update jquery.timepicker to 1.11.14 (bsc#1119081) \n\ntika-core:\n\n- New upstream version (1.20). Fixes infinite loop in SQLite3Parser (CVE-2018-17197) (bsc#1121038) \n\n","status":"published","published":"2019-04-03T15:33:20Z","modified":"2026-02-04T03:42:08.018945Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2019:0863-1","title":"Security update for SUSE Manager Server 3.1","description":"\nThis update fixes the following issues:\n\ncobbler:\n\n- Fixes case where distribution detection returns None (bsc#1130658)\n- SUSE texmode fix (bsc#1109316)\n- Fix for SUSE distribution detection in ISO building\n  (bsc#1123991)\n\npy26-compat-salt:\n\n- Remove arch from name when pkg.list_pkgs is called with 'attr' (bsc#1114029)\n\nspacecmd:\n\n- Fix importing state channels using configchannel_import\n- Fix getting file info for latest revision (via configchannel_filedetails)\n\nspacewalk-branding:\n\n- Update jquery.timepicker dependency to 1.11.14 to allow parsing\n  the time format without depending on the language. (bsc#1119081)\n\nspacewalk-java:\n\n- Fix a problem when cloning public child channels with a private base channel (bsc#1124639)\n- Keep assigned channels on traditional to minion migration (bsc#1122836)\n- Fix 'Add Selected to SSM' on System Groups -\u003e systems page (bsc#1121856)\n- Disable notification types with 'java.notifications_type_disabled' in rhn.conf (bsc#1111910)\n- XMLRPC API: Include init.sls in channel file list (bsc#1111191)\n- Fix the config channels assignment via SSM (bsc#1117759)\n\nspacewalk-utils:\n\n- Create /etc/rhn with correct ownership to prevent file conflicts\n\nspacewalk-web:\n\n- Fix action scheduler time picker prefill when the server is on  'UTC/GMT' timezone (bsc#1121195)\n- Fix initializing of the datetime picker (bsc#1126862)\n- Show feedback messages after using the retry option on the notification messages page\n\nsubscription-matcher:\n\n- Old style hard bundle merging fix (bsc#1114059)\n\nsusemanager:\n\n- Fix creation of bootstrap repositories for SLE12 (no SP) by requiring python-setuptools\n  only for SLE12 \u003e= SP1 (bsc#1129765)\n- Add `python-setuptools` package dependency to SLES12 bootstrap repo (bsc#1119964)\n- Rhnlib was renamed to python2-rhnlib. Change bootstrap data accordingly.\n\nsusemanager-schema:\n\n- Fix performance regression in inter-server-sync (bsc#1128781)\n\nsusemanager-docs_en:\n\n- Update text and image files\n- 2.1 comparison: clarify profile syncing support\n- Adjust documentation about notification settings\n- Fix internal link (SMT documentation).\n- Remove documentation about the 'mgr-sync enable-scc' subcommand.  This\n  subcommand is no longer available.\n\nsusemanager-frontend-libs:\n\n- Update jquery.timepicker to 1.11.14 (bsc#1119081) \n\ntika-core:\n\n- New upstream version (1.20). Fixes infinite loop in SQLite3Parser (CVE-2018-17197) (bsc#1121038) \n\n","status":"published","published":"2019-04-03T15:33:20Z","modified":"2026-02-04T04:11:26.950628Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2020:1066-1","title":"Security update for ardana-ansible, ardana-barbican, ardana-db, ardana-monasca, ardana-mq, ardana-neutron, ardana-octavia, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, documentation-suse-openstack-cloud, memcached, openstack-manila, openstack-neutron, openstack-nova, pdns, python-amqp, rubygem-puma, zookeeper","description":"This update for ardana-ansible, ardana-barbican, ardana-db, ardana-monasca, ardana-mq, ardana-neutron, ardana-octavia, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, documentation-suse-openstack-cloud, memcached, openstack-manila, openstack-neutron, openstack-nova, pdns, python-amqp, rubygem-puma, zookeeper contains the following fixes:\n\nSecurity fix for rubygem-puma:\n- CVE-2020-5247: Fixed an issue where the newlines in headers according to Rack spec were not split (bsc#1165402)\n\nSecurity fix for openstack-manila:\n\n- CVE-2020-9543: Fixed an issue where an attacker could view, update, delete, or share resources that do not\n\nSecurity fixes for memcached:\n\n- CVE-2019-15026: Fixed a stack-based buffer over-read in conn_to_str() in memcached.c (bsc#1149110).\n- CVE-2019-11596: Fixed NULL pointer dereference in process_lru_command() in memcached.c (bsc#1133817).\n\nSecurity fixes for pdns:\n\n- CVE-2019-3871: Fixed a denial of service with the HTTP remote backend when the attacker can send crafted DNS queries (bsc#1129734).\n- CVE-2018-10851: Fixed a denial of service via crafted zone record (bnc#1114157).\n- CVE-2018-14626: Fixed a denial of service by hiding DNSSEC records using a crafted DNS query (bsc#1114169).\n\nSecurity fixes for zookeeper:\n\n- CVE-2019-0201: Fixed an information disclosure in the ACL handling (bsc#1135773).\n- CVE-2017-5637: Fixed incorrect input validation with wchp/wchc four letter words (bsc#1040519).\n\nChanges in ardana-ansible:\n- Update to version 8.0+git.1583432621.24fa60e:\n  * Upgrade pre-checks in Cloud 8 and Cloud 9 (SOC-10300)\n\nChanges in ardana-barbican:\n- Update to version 8.0+git.1585152761.8ef3d61:\n  * monitor ardana-node-cert (SOC-10873)\n\nChanges in ardana-db:\n- Update to version 8.0+git.1583944923.03cca6c:\n  * monitor MySQL TLS certificate (SOC-10873)\n\nChanges in ardana-monasca:\n- Update to version 8.0+git.1583944894.38f023a:\n  * Add certificate file check alarm (SOC-10873)\n\nChanges in ardana-mq:\n- Update to version 8.0+git.1583944811.dc14403:\n  * monitor RabbitMQ TLS certificate (SOC-10873)\n\nChanges in ardana-neutron:\n- Update to version 8.0+git.1584715262.e4ea620:\n  * Add symlink for neutron-fwaas.json.j2 (bsc#1166290)\n\nChanges in ardana-octavia:\n- Update to version 8.0+git.1585171918.418f5cf:\n  * Reconfigure monitor if needed (SOC-10873)\n\n- Update to version 8.0+git.1585168661.135c735:\n  * fix Octavia client cert redeploy (SOC-10873)\n\n- Update to version 8.0+git.1585152502.f15907a:\n  * monitor Octavia client certificate (SOC-10873)\n\nChanges in ardana-tempest:\n- Update to version 8.0+git.1585311051.6ab5488:\n  * Enable port-security feature in tempest(SOC-11027)\n\nChanges in crowbar-core:\n- Update to version 5.0+git.1585575551.16781d00d:\n  * upgrade: Point to config dir instead of config file (SOC-11171)\n  * upgrade: Do not call neutron-evacuate-lbaasv2-agent with use_crm (SOC-11171)\n\n- Update to version 5.0+git.1585316726.670746c8c:\n  * upgrade: Fix systemd unit listing (trivial)\n\n- Update to version 5.0+git.1585213241.46f12f9be:\n  * upgrade: Remove the assignement of crowbar-upgrade role (SOC-11166)\n\n- Update to version 5.0+git.1585118470.eed9020de:\n  * Update the default value of OS version (trivial)\n  * Ignore CVE-2020-5267 in CI (bsc#1167240)\n  * Ignore CVE-2020-10663 in CI (bsc#1167244)\n\n- Update to version 5.0+git.1583911121.d6b4b4b1a:\n  * ses: Make SES UI safe for unknown options (trivial)\n  * ses: Use cinder user for nova (SOC-11119)\n  * ses: Added helper for populating cinder volumes (SOC-11117)\n  * ses: Add ses cookbook (SOC-11114)\n  * ses: Configuration upload (SOC-11115)\n\n- Update to version 5.0+git.1583309007.e3a8b81e9:\n  * Ignore CVE-2020-8130 in CI (bsc#1164804)\n  * Ignore CVE-2020-5247 (bsc#1165402)\n\nChanges in crowbar-ha:\n- Update to version 5.0+git.1585316176.344190f:\n  * add ssl termination on haproxy (bsc#1149535)\n\nChanges in crowbar-openstack:\n- Update to version 5.0+git.1585304226.2164b7895:\n  * nova: Fix migration numbers (trivial)\n\n- Update to version 5.0+git.1584692779.369c58aca:\n  * nova: Drop redundant disk_cachemodes (trivial)\n  * nova: Add option to disable ephemeral on ceph (SOC-11119)\n  * keystone: Register SES RadosGW endpoints (SOC-5270)\n  * heat: Increase heat_register syncmark timeout (SOC-11103)\n  * heat: Simplify domain registration code (SOC-11103)\n  * nova: Setup CEPH secrets later (SOC-11141)\n  * nova: Enable ephemeral volumes on SES (SOC-11119)\n  * glance: Set SES as default for new deployments (SOC-11118)\n  * cinder: Correctly show old internal backends (SOC-11117)\n  * nova: SES integration (SOC-11117)\n  * nova: Hound fixes (trivial)\n  * nova: Better error handling when Cephx auth is failing (noref)\n  * nova: delete libvirt secret snippet immediately (noref)\n  * nova: reduce nesting of ceph management code (noref)\n  * nova: Remove obsolete rbd/ceph attributes (trivial)\n  * cinder: SES integration (SOC-11117)\n  * cinder: Disable use_crowbar default (SOC-11117)\n  * glance: SES integration (SOC-11118)\n\nChanges in documentation-suse-openstack-cloud:\n- Update to version 8.20200319:\n  * Adding ses-integration docs to cloud 8 (noref)\n  * Fix bsc-1130532. Add feedback\n  * fix bsc-1130532\n\n- Update to version 8.20200116:\n  * Fixing links from suse.com/doc to new URL (noref)\n\n- Update to version 8.20200224:\n  * Designate: add instructions on using PowerDNS backend (SOC-11051)\n  * Designate: recommend deploying DNS in a cluster in HA deployment (SOC-10636)\n  * message to add non-admin node for public network (SOC-10658)\n  * update designate deployment (SOC-8739)\n  * add designate barclamp (SCRD-8739)\n  * remove Designate name server instruction (bsc#1125357,SCRD-7649)\n\n- Update to version 8.20200130:\n  * Add instructions for lbaas v2 loadbalancers (SOC-10980) (#1253)\n\n- Update to version 8.20191211:\n  * Specify that manila-share should be installed on the control node (SOC-10938) (#1230)\n  * Remove (commented) mention of phrases-decl.ent (trivial)\n\n- Update to version 8.20191206:\n  * Clarify keyring chown instructions for Ceph (bsc#1111180)\n  * Clarify VSA/Ceph support in HOS 8 , SOC-10981 (bsc#144694)\n\n- Update to version 8.20191205:\n  * Update incorrect Manila install/setup instructions (SOC-10975)\n\n- Update to version 8.20191029:\n  * Supplement/UAdmin: Group guides on documentation.suse.com (trivial)\n\n- Update to version 8.20191023:\n  * fix instructions for TLS certitificate renewal (SOC-10846)\n\n- Update to version 8.20191002:\n  * Added missing edit (SOC-8480)\n  * Adding Carl's second round of edits (SOC-8480)\n  * Removing accidentally re-added guilabels (SOC-8480)\n  * Applying Carl's edits (SOC-8480)\n  * Optimizing PNGs (SOC-8480)\n  * Removing guilabel complaint (SOC-8480)\n  * Adding xi:include to commit (SOC-8480)\n  * Add SSLCA-SelfSigned cert info to SOC Crowbar documentation (SOC-8480)\n  * Add SSLCA-SelfSigned cert info to SOC Crowbar documentation (SOC-8480)\n\n- Update to version 8.20190923:\n  * remove zvm references, only in SOC6 (noref)\n\n- Update to version 8.20190920:\n  * remove workaround, leave description (bsc#1151206)\n  * add qos to neutron not supported (bsc#1151206)\n\n- Update to version 8.20190829:\n  * add available clients, dedicated CLM (bsc#1148426)\n  * add tempest to service components, dedicated CLM (bsc#1148426)\n\n- Update to version 8.20190823:\n  * Create CC-BY license file (noref)\n  * for MariaDB update, db cluster must be running, healthy (bsc#1132852)\n\n- Update to version 8.20190820:\n  * Fix broken URLs (SOC-10109)\n\n- Update to version 8.20190820:\n  * add requirement for dummy entries in servers.yml (bsc#1146206)\n\n- Update to version 8.20190816:\n  * add workaround for partition image resize (bsc#1145498)\n\n- Update to version 8.20190813:\n  * MANAGEMENT network group cannot be changed, is required (SOC-10106)\n  * remove NSX references from Crowbar deployment (SOC-10081)\n\nChanges in memcached:\n- version update to 1.5.17\n  * bugfixes\n    fix strncpy call in stats conns to avoid ASAN violation (bsc#1149110, CVE-2019-15026)\n    extstore: fix indentation\n    add error handling when calling dup function\n    add unlock when item_cachedump malloc failed\n    extstore: emulate pread(v) for macOS\n    fix off-by-one in logger to allow CAS commands to be logged.\n    use strdup for explicitly configured slab sizes\n    move mem_requested from slabs.c to items.c (internal cleanup)\n  * new features\n    add server address to the 'stats conns' output\n    log client connection id with fetchers and mutations\n    Add a handler for seccomp crashes\n- version update to 1.5.16\n  * bugfixes\n    When nsuffix is 0 space for flags hasn't been allocated so don't memcpy them.\n- version update to 1.5.15\n  * bugfixes\n    Speed up incr/decr by replacing snprintf.\n    Use correct buffer size for internal URI encoding.\n    change some links from http to https\n    Fix small memory leak in testapp.c.\n    free window_global in slab_automove_extstore.c\n    remove inline_ascii_response option\n    -Y [filename] for ascii authentication mode\n    fix: idle-timeout wasn't compatible with binprot\n  * features\n    -Y [authfile] enables an authentication mode for ASCII protocol.\n- modified patches\n  % memcached-autofoo.patch (refreshed)\n\n- version update to 1.5.14\n  * update -h output for -I (max item size)\n  * fix segfault in 'lru' command (bsc#1133817, CVE-2019-11596)\n  * fix compile error on centos7\n  * extstore: error adjusting page_size after ext_path\n  * extstore: fix segfault if page_count is too high.\n  * close delete + incr item survival race bug\n  * memcached-tool dump fix loss of exp value\n  * Fix 'qw' in 'MemcachedTest.pm' so wait_ext_flush is exported properly\n  * Experimental TLS support.\n  * Basic implementation of TLS for memcached.\n  * Improve Get And Touch documentation\n  * fix INCR/DECR refcount leak for invalid items\n- modified patches\n  % memcached-autofoo.patch (refreshed)\n\n- Version bump to 1.5.11:\n  * extstore: balance IO thread queues\n- Drop memcached-fix_test.patch that is present now upstream\n\n- Add patch to fix aarch64, ppc64* and s390x tests:\n  * memcached-fix_test.patch\n\n- Fix linter errors regarding COPYING\n\n- update to 1.5.10:\n  * disruptive change in extstore: -o ext_page_count= is deprecated\n    and no longer works. To specify size: -o ext_path=/d/m/e:500G\n    extstore figures out the page count based on your desired page\n    size. M|G|T|P supported.\n  * extstore: Add basic JBOD support: ext_path can be specified\n    multiple times for striping onto simimar devices\n  * fix alignment issues on some ARM platforms for chunked items\n\n- Update to 1.5.9:\n  * Bugfix release.\n  * Important note: if using --enable-seccomp, privilege dropping\n    is no longer on by default. The feature is experimental and many\n    users are reporting hard to diagnose problems on varied platforms.\n  * Seccomp is now marked EXPERIMENTAL, and must be explicitly\n    enabled by adding -o drop_privileges. Once we're more confident\n    with the usability of the feature, it will be enabled in -o modern,\n    like any other new change. You should only use it if you are\n    willing to carefully test it, especially if you're a vendor or\n    distribution.\n  * Also important is a crash fix in extstore when using the ASCII\n    protocol, large items, and running low on memory.\n\n- update to 1.5.8:\n  * Bugfixes for seccomp and extstore\n  * Extstore platform portability has been greatly improved for ARM\n    and 32bit systems\n- includes changes from 1.5.7:\n  * Fix alignment issues for 64bit ARM processors\n  * Fix seccomp portability\n  * Fix refcount leak with extstore while using binary touch commands\n\n- turn on the testsuite again, it seems to pass server side,\n  too\n\n- Home directory shouldn't be world readable bsc#1077718\n- Mention that this stream isn't affected by bsc#1085209,\n  CVE-2018-1000127 to make the checker bots happy.\n\nChanges in openstack-manila:\n- Update to version manila-5.1.1.dev5:\n  * Fix manila-tempest-minimal-dsvm-lvm-centos-7 job\n  * share\\_networks: enable project\\_only API only\n\nChanges in openstack-manila:\n- Rebased patches:\n  + cve-2020-9543-stable-pike.patch dropped (merged upstream)\n\n- Update to version manila-5.1.1.dev5:\n  * Fix manila-tempest-minimal-dsvm-lvm-centos-7 job\n  * share\\_networks: enable project\\_only API only\n\nChanges in openstack-neutron:\n- Update to version neutron-11.0.9.dev63:\n  * ovs agent: signal to plugin if tunnel refresh needed\n  * Do not initialize snat-ns twice\n\nChanges in openstack-neutron:\n- Update to version neutron-11.0.9.dev63:\n  * ovs agent: signal to plugin if tunnel refresh needed\n  * Do not initialize snat-ns twice\n\nChanges in openstack-nova:\n- Update to version nova-16.1.9.dev61:\n  * Avoid circular reference during serialization\n  * Mask the token used to allow access to consoles\n  * Improve metadata server performance with large security groups\n  * Remove exp legacy-tempest-dsvm-full-devstack-plugin-nfs\n\n- Update to version nova-16.1.9.dev54:\n  * pike-only: remove broken non-voting ceph jobs\n  * nova-live-migration: Wait for n-cpu services to come up after configuring Ceph\n  * rt: only map compute node if we created it\n\nChanges in openstack-nova:\n- Update to version nova-16.1.9.dev61:\n  * Avoid circular reference during serialization\n  * Mask the token used to allow access to consoles\n  * Improve metadata server performance with large security groups\n  * Remove exp legacy-tempest-dsvm-full-devstack-plugin-nfs\n\n- Update to version nova-16.1.9.dev54:\n  * pike-only: remove broken non-voting ceph jobs\n  * nova-live-migration: Wait for n-cpu services to come up after configuring Ceph\n  * rt: only map compute node if we created it\n\nChanges in pdns:\n- Add missing 'BuildRequires: libmysqlclient-devel' to allow\n  the package to build correctly.\n\n- CVE-2019-3871-auth-4.1.6.patch: fixes insufficient validation in\n  HTTP remote backend (bsc#1129734, CVE-2019-3871)\n\n- CVE-2018-10851-auth-4.1.4.patch: fixes DoS via crafted zone record\n  (bnc#1114157, CVE-2018-10851)\n- CVE-2018-14626-auth-4.1.4.patch: fixes an issue allowing a\n  remote user to craft a DNS query that will cause an answer without\n  DNSSEC records to be inserted into the packet cache and be\n  returned to clients asking for DNSSEC records, thus hiding\n  the presence of DNSSEC signatures leading to a potential DoS\n  (bsc#1114169, CVE-2018-14626)\n\nChanges in python-amqp:\n- Make it build for SLE12SP3:\n  - remove pytest-sugar build dependency\n  - used %doc macro instead of %license\n- Removed patches that are already included in 2.4.2\n  - 0002-Do_not_send_AAAA_DNS_request_when_domain_resolved_to_IPv4_address.patch (SOC-9144)\n  - 0001-Always-treat-SSLError-timeouts-as-socket-timeouts-24.patch (bsc#1115904)\n- Update to 2.4.2:\n  - Added support for the Cygwin platform\n  - Correct offset incrementation when parsing bitmaps.\n  - Consequent bitmaps are now parsed correctly.\n- Better call of py.test\n- Add versions to dependencies\n- Remove python-sasl from build dependencies\n- Update to version 2.4.1\n  * To avoid breaking the API basic_consume() now returns the consumer tag\n    instead of a tuple when nowait is True.\n  * Fix crash in basic_publish when broker does not support connection.blocked\n    capability.\n  * read_frame() is now Python 3 compatible for large payloads.\n  * Support float read_timeout/write_timeout.\n  * Always treat SSLError timeouts as socket timeouts.\n  * Treat EWOULDBLOCK as timeout.\n- from 2.4.0\n  * Fix inconsistent frame_handler return value.\n    The function returned by frame_handler is meant to return True\n    once the complete message is received and the callback is called,\n    False otherwise.\n    This fixes the return value for messages with a body split across\n    multiple frames, and heartbeat frames.\n  * Don't default content_encoding to utf-8 for bytes.\n    This is not an acceptable default as the content may not be\n    valid utf-8, and even if it is, the producer likely does not\n    expect the message to be decoded by the consumer.\n  * Fix encoding of messages with multibyte characters.\n    Body length was previously calculated using string length,\n    which may be less than the length of the encoded body when\n    it contains multibyte sequences. This caused the body of\n    the frame to be truncated.\n  * Respect content_encoding when encoding messages.\n    Previously the content_encoding was ignored and messages\n    were always encoded as utf-8. This caused messages to be\n    incorrectly decoded if content_encoding is properly respected\n    when decoding.\n  * Fix AMQP protocol header for AMQP 0-9-1.\n    Previously it was set to a different value for unknown reasons.\n  * Add support for Python 3.7.\n    Change direct SSLSocket instantiation with wrap_socket.\n  * Add support for field type 'x' (byte array).\n  * If there is an exception raised on Connection.connect or\n    Connection.close, ensure that the underlying transport socket\n    is closed.  Adjust exception message on connection errors as well.\n  * TCP_USER_TIMEOUT has to be excluded from KNOWN_TCP_OPTS in BSD platforms.\n  * Handle negative acknowledgments.\n  * Added integration tests.\n  * Fix basic_consume() with no consumer_tag provided.\n  * Improved empty AMQPError string representation.\n  * Drain events before publish.\n    This is needed to capture out of memory messages for clients that only\n    publish. Otherwise on_blocked is never called.\n  * Don't revive channel when connection is closing.\n    When connection is closing don't raise error when Channel.Close\n    method is received.\n\nChanges in zookeeper:\n- Apply 0002-Apply-patch-to-resolve-CVE-2019-0201.patch\n  This applies the patch for ZOOKEEPER-1392 to resolve CVE-2019-0201\n  Should not allow to read ACL when not authorized to read node \n  (bsc#1135773)\n\n- Various cleanups in spec file\n\n- Fixed off-by-one in zkCleanTRX.sh and made output more useful (bsc#1048688, FATE#323204)\n\n- Fixed ExecStartPre statment in service file\n\n- added zkCleanTRX.sh to clean up 0 length transaction logs\n\n- Update to to zookeeper-3.4.10 (bsc#1040519)\n  * Fixes CVE-2017-5637\n- Remove Changes.txt (missing as of 3.4.10)\n\n","status":"published","published":"2020-04-22T12:41:50Z","modified":"2026-02-04T02:39:31.224888Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"USN-7203-1","title":"pdns, pdns-recursor vulnerabilities","description":"Wei Hao discovered that PowerDNS Authoritative Server incorrectly handled\nmemory when accessing certain files. An attacker could possibly use this\nissue to achieve arbitrary code execution. (CVE-2018-1046)\n\nIt was discovered that PowerDNS Authoritative Server and PowerDNS Recursor\nincorrectly handled memory when receiving certain remote input. An attacker\ncould possibly use this issue to cause denial of service. (CVE-2018-10851)\n\nKees Monshouwer discovered that PowerDNS Authoritative Server and PowerDNS\nRecursor incorrectly handled request validation after having cached\nmalformed input. An attacker could possibly use this issue to cause denial\nof service. (CVE-2018-14626)\n\nToshifumi Sakaguchi discovered that PowerDNS Recursor incorrectly handled\nrequests after having cached malformed input. An attacker could possibly\nuse this issue to cause denial of service. (CVE-2018-14644)\n\nNathaniel Ferguson discovered that PowerDNS Authoritative Server\nincorrectly handled memory when receiving certain remote input. An attacker\ncould possibly use this issue to obtain sensitive information.\n(CVE-2020-17482)\n\nNicolas Dehaine and Dmitry Shabanov discovered that PowerDNS Authoritative\nServer and PowerDNS Recursor incorrectly handled IXFR requests in certain\ncircumstances. An attacker could possibly use this issue to cause denial of\nservice. (CVE-2022-27227)\n","status":"published","published":"2025-01-14T13:40:35Z","modified":"2026-06-25T13:32:30.073988287Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}