{"id":"CVE-2020-17482","aliases":["ALPINE-CVE-2020-17482","DEBIAN-CVE-2020-17482","EUVD-2020-9432","GHSA-rwvv-h93r-mw45","MGASA-2020-0375","SUSE-SU-2020:2718-1","SUSE-SU-2020:2785-1","UBUNTU-CVE-2020-17482","USN-7203-1","openSUSE-SU-2020:1556-1","openSUSE-SU-2024:11156-1"],"status":"published","title":"An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user...","description":"An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02592,"percentile":0.85417,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-908"],"published":"2020-09-23T07:49:01Z","modified":"2026-11-03T06:32:36Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"pdns","fixed_in":["4.1.14-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"pdns","fixed_in":["4.2.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"pdns","fixed_in":["4.2.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"pdns","fixed_in":["4.3.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"pdns","fixed_in":["4.3.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"pdns","fixed_in":["4.3.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"pdns","fixed_in":["4.3.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"pdns","fixed_in":["4.3.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"pdns","fixed_in":["4.3.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"pdns","fixed_in":["4.3.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"pdns","fixed_in":["4.3.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"pdns","fixed_in":["4.3.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"pdns","fixed_in":["4.3.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"pdns","fixed_in":["4.3.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"pdns","fixed_in":["4.3.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"pdns","fixed_in":["4.1.14-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"pdns","fixed_in":["4.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pdns","fixed_in":["4.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pdns","fixed_in":["4.3.1-1"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"pdns","fixed_in":["4.1.2-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"pdns","fixed_in":["4.1.2-3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"pdns","fixed_in":["4.1.8-3.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns","fixed_in":["4.0.0~alpha2-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns","fixed_in":["4.1.1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pdns","fixed_in":["4.2.1-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12 SP1","package":"pdns","fixed_in":["4.3.1-bp152.2.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP1","package":"pdns","fixed_in":["4.3.1-bp152.2.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP2","package":"pdns","fixed_in":["4.3.1-bp152.2.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"pdns","fixed_in":["4.3.1-bp152.2.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.2","package":"pdns","fixed_in":["4.3.1-bp152.2.5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.14-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.14-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.14-1.mga7"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.2-3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.8-3.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0~alpha2-3ubuntu0.1~esm1"}]}],"versions":["3.4.5-1build2","3.4.6-2","3.4.6-3","3.4.7-1","3.4.7-2","4.0.0~alpha1-1","4.0.0~alpha2-2","4.0.0~alpha2-3","4.0.0~alpha2-3build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-1ubuntu0.1~esm1"}]}],"versions":["4.0.4-2","4.0.4-2build1","4.0.5-1","4.1.0-1","4.1.0-2","4.1.0-2build1","4.1.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1ubuntu0.1~esm1"}]}],"versions":["4.1.6-3build1","4.2.0-1","4.2.1-1","4.2.1-1build1","4.2.1-1build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0~alpha2-3ubuntu0.1~esm1"}]}],"versions":["3.4.5-1build2","3.4.6-2","3.4.6-3","3.4.7-1","3.4.7-2","4.0.0~alpha1-1","4.0.0~alpha2-2","4.0.0~alpha2-3","4.0.0~alpha2-3build1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0~alpha2-2ubuntu0.1+esm1"}]}],"versions":["3.7.3-1","4.0.0~alpha1-1","4.0.0~alpha1-2","4.0.0~alpha2-2","4.0.0~alpha2-2ubuntu0.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-1ubuntu0.1~esm1"}]}],"versions":["4.0.4-2","4.0.4-2build1","4.0.5-1","4.1.0-1","4.1.0-2","4.1.0-2build1","4.1.1-1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.1-2ubuntu0.1~esm1"}]}],"versions":["4.0.6-1","4.0.6-1build1","4.0.7-1","4.1.1-1","4.1.1-1build1","4.1.1-2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1ubuntu0.1~esm1"}]}],"versions":["4.1.6-3build1","4.2.0-1","4.2.1-1","4.2.1-1build1","4.2.1-1build2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.1-1ubuntu0.1~esm1"}]}],"versions":["4.2.0-6","4.2.1-1","4.2.1-1build1","4.2.1-1build2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.3-1ubuntu0.1~esm1"}]}],"versions":["4.4.1-1build1","4.4.1-3","4.4.1-4","4.5.2-1build1","4.5.3-1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pdns-recursor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.0-1ubuntu1+esm1"}]}],"versions":["4.4.2-3","4.6.0-1ubuntu1"],"bundled":6},{"source":"osv","ecosystem":"SUSE:Package Hub 12 SP1","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-bp152.2.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-bp152.2.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-bp152.2.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-bp152.2.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-bp152.2.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-1.5"}]}],"bundled":16}],"products":[{"vendor":"powerdns","product":"authoritative"}],"references":[{"url":"https://github.com/PowerDNS/pdns","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-05.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://security.gentoo.org/glsa/202012-18","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-17482"},{"url":"https://github.com/advisories/GHSA-rwvv-h93r-mw45"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-17482","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-17482","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0375.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24994","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27310","tags":["report"]},{"url":"https://doc.powerdns.com/authoritative/changelog/4.1.html#change-4.1.14","tags":["web"]},{"url":"https://blog.powerdns.com/2019/08/01/security-notice-for-powerdnspostgres-users/","tags":["web"]},{"url":"https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-04.html","tags":["advisory"]},{"url":"https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-05.html","tags":["advisory"]},{"url":"https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-06.html","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202718-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1176535","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17482","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20202785-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-17482","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-17482","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7203-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1046","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10851","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14626","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-14644","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-27227","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QFEC5JUF7ZEJL5FSPURV27CYZCQG2I2Z/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1156196","tags":["report"]},{"url":"https://bugzilla.suse.com/1176312","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3337","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2120","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7072","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7073","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15091","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10203","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3871","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-36754","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-17482","description":"An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.","status":"published","published":"2020-10-02T08:21:09Z","modified":"2024-08-04T14:00:47.48Z","updated_at":"2026-11-02T14:35:54.80237Z"}],"euvd":[{"id":"EUVD-2020-9432","description":"An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.","status":"published","published":"2020-10-02T08:21:09Z","modified":"2024-08-04T14:00:47Z","updated_at":"2026-11-03T03:07:26.951665Z"}],"ghsa":[{"id":"GHSA-rwvv-h93r-mw45","title":"An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user...","description":"An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.","status":"published","published":"2022-05-24T17:29:59Z","modified":"2023-01-29T05:04:46Z","cwes":["CWE-200","CWE-908"],"updated_at":"2026-11-02T14:45:37.901426Z"}],"nvd":[{"id":"CVE-2020-17482","description":"An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.","status":"published","published":"2020-10-02T09:15:13.57Z","modified":"2026-06-17T02:59:00.09Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T14:06:17.70091Z"}],"osv":[{"id":"ALPINE-CVE-2020-17482","description":"An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.","status":"published","published":"2020-10-02T09:15:13.57Z","modified":"2026-11-03T06:32:36.55581Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"CVE-2020-17482","description":"An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.","status":"published","published":"2020-10-02T09:15:13.57Z","modified":"2026-10-20T10:52:01.902331488Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:15.212689Z"},{"id":"DEBIAN-CVE-2020-17482","description":"An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.","status":"published","published":"2020-10-02T09:15:13.57Z","modified":"2026-10-26T12:01:41.983118152Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"UBUNTU-CVE-2020-17482","description":"An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.","status":"published","published":"2020-10-02T09:15:00Z","modified":"2026-02-04T03:03:01.487022Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"MGASA-2020-0375","title":"Updated pdns packages fix security vulnerability","description":"An issue has been found in PowerDNS Authoritative Server allowing an\nauthorized user to cause the server to exit by inserting a crafted record in a\nMASTER type zone under their control. The issue is due to the fact that the\nAuthoritative Server will exit when it runs into a parsing error while looking\nup the NS/A/AAAA records it is about to use for an outgoing notify\n(CVE-2019-10162).\n\nAn issue has been found in PowerDNS Authoritative Server allowing a remote,\nauthorized master server to cause a high CPU load or even prevent any further\nupdates to any slave zone by sending a large number of NOTIFY messages. Note\nthat only servers configured as slaves are affected by this issue\n(CVE-2019-10163).\n\nAn issue has been found in PowerDNS Authoritative Server allowing an\nauthorized user to cause the server to exit by inserting a crafted record in a\nMASTER type zone under their control. The issue is due to the fact that the\nAuthoritative Server will exit when it tries to store the notified serial in\nthe PostgreSQL database, if this serial cannot be represented in 31 bits\n(CVE-2019-10203).\n\nAn issue has been found in PowerDNS Authoritative Server before 4.3.1 where an\nauthorized user with the ability to insert crafted records into a zone might be\nable to leak the content of uninitialized memory. Such a user could be a\ncustomer inserting data via a control panel, or somebody with access to the\nREST API. Crafted records cannot be inserted via AXFR (CVE-2020-17482).\n\nThe pdns package has been updated to version 4.1.14, fixing these issues and\nseveral other bugs.  See the upstream changelog for details.\n\nAlso note that manual intervention is required to fix the CVE-2019-10203 issue\nfor those using PostgreSQL with pdns.  See the upstream blog post for details.\n","status":"published","published":"2020-09-27T20:06:37Z","modified":"2026-04-16T04:42:01.491644061Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2020:1556-1","title":"Security update for pdns","description":"This update for pdns fixes the following issues:\n\t  \n- Build with libmaxminddb instead of the obsolete GeoIP (boo#1156196)\n- CVE-2020-17482: Fixed an error that can result in leaking of\n  uninitialised memory through crafted zone records\n  (boo#1176535)\n- Backported compilation fix vs. latest Boost 1.74 (boo#1176312)\n","status":"published","published":"2020-09-27T22:21:46Z","modified":"2026-02-04T02:54:28.751305Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:11156-1","title":"pdns-4.5.1-1.5 on GA media","description":"These are all security issues fixed in the pdns-4.5.1-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:39:47.285231Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:2718-1","title":"Security update for pdns","description":"This update for pdns fixes the following issues:\n\n- CVE-2020-17482: Fixed an issue where an authorized user with the ability to insert crafted \n  records into a zone might be able to leak the content of uninitialized memory (bsc#1176535)\n","status":"published","published":"2020-09-23T07:49:01Z","modified":"2026-02-04T04:33:30.122209Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:2785-1","title":"Security update for pdns","description":"This update for pdns fixes the following issues:\n\n- CVE-2020-17482: Fixed an issue where an authorized user with the ability \n  to insert crafted records into a zone might be able to leak the content of uninitialized memory (bsc#1176535).\n","status":"published","published":"2020-09-29T10:50:57Z","modified":"2026-02-04T03:28:55.625974Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"USN-7203-1","title":"pdns, pdns-recursor vulnerabilities","description":"Wei Hao discovered that PowerDNS Authoritative Server incorrectly handled\nmemory when accessing certain files. An attacker could possibly use this\nissue to achieve arbitrary code execution. (CVE-2018-1046)\n\nIt was discovered that PowerDNS Authoritative Server and PowerDNS Recursor\nincorrectly handled memory when receiving certain remote input. An attacker\ncould possibly use this issue to cause denial of service. (CVE-2018-10851)\n\nKees Monshouwer discovered that PowerDNS Authoritative Server and PowerDNS\nRecursor incorrectly handled request validation after having cached\nmalformed input. An attacker could possibly use this issue to cause denial\nof service. (CVE-2018-14626)\n\nToshifumi Sakaguchi discovered that PowerDNS Recursor incorrectly handled\nrequests after having cached malformed input. An attacker could possibly\nuse this issue to cause denial of service. (CVE-2018-14644)\n\nNathaniel Ferguson discovered that PowerDNS Authoritative Server\nincorrectly handled memory when receiving certain remote input. An attacker\ncould possibly use this issue to obtain sensitive information.\n(CVE-2020-17482)\n\nNicolas Dehaine and Dmitry Shabanov discovered that PowerDNS Authoritative\nServer and PowerDNS Recursor incorrectly handled IXFR requests in certain\ncircumstances. An attacker could possibly use this issue to cause denial of\nservice. (CVE-2022-27227)\n","status":"published","published":"2025-01-14T13:40:35Z","modified":"2026-06-25T13:32:30.073988287Z","updated_at":"2026-11-02T16:58:18.876384Z"}]}}