FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-19 20:48:44 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
a6860b11-0dee-11eb-94ff-6805ca2fa271	powerdns-recursor -- cache pollution PowerDNS Team reports: CVE-2020-25829: An issue has been found in PowerDNS Recursor where a remote attacker can cause the cached records for a given name to be updated to the âBogusâ DNSSEC validation state, instead of their actual DNSSEC âSecureâ state, via a DNS ANY query. This results in a denial of service for installations that always validate (dnssec=validate) and for clients requesting validation when on-demand validation is enabled (dnssec=process). Discovery 2020-10-13 Entry 2020-10-14 powerdns-recursor ge 4.3.0 lt 4.3.5 ge 4.2.0 lt 4.2.5 ge 4.1.0 lt 4.1.18 https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-07.html CVE-2020-25829

VuXML ID

Description

a6860b11-0dee-11eb-94ff-6805ca2fa271

powerdns-recursor -- cache pollution

PowerDNS Team reports:

CVE-2020-25829: An issue has been found in PowerDNS Recursor where a remote attacker can cause the cached records for a given name to be updated to the âBogusâ DNSSEC validation state, instead of their actual DNSSEC âSecureâ state, via a DNS ANY query. This results in a denial of service for installations that always validate (dnssec=validate) and for clients requesting validation when on-demand validation is enabled (dnssec=process).

Discovery 2020-10-13
Entry 2020-10-14
powerdns-recursor

ge 4.3.0 lt 4.3.5

ge 4.2.0 lt 4.2.5

ge 4.1.0 lt 4.1.18

https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-07.html
CVE-2020-25829