FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-24 03:12:49 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
a6860b11-0dee-11eb-94ff-6805ca2fa271powerdns-recursor -- cache pollution

PowerDNS Team reports:

CVE-2020-25829: An issue has been found in PowerDNS Recursor where a remote attacker can cause the cached records for a given name to be updated to the ‘Bogus’ DNSSEC validation state, instead of their actual DNSSEC ‘Secure’ state, via a DNS ANY query. This results in a denial of service for installations that always validate (dnssec=validate) and for clients requesting validation when on-demand validation is enabled (dnssec=process).


Discovery 2020-10-13
Entry 2020-10-14
powerdns-recursor
ge 4.3.0 lt 4.3.5

ge 4.2.0 lt 4.2.5

ge 4.1.0 lt 4.1.18

https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-07.html
CVE-2020-25829
641cd669-bc37-11ea-babf-6805ca2fa271powerdns-recursor -- access restriction bypass

PowerDNS Team reports:

CVE-2020-14196: An issue has been found in PowerDNS Recursor where the ACL applied to the internal web server via webserver-allow-from is not properly enforced, allowing a remote attacker to send HTTP queries to the internal web server, bypassing the restriction. In the default configuration the API webserver is not enabled. Only installations using a non-default value for webserver and webserver-address are affected.


Discovery 2020-07-01
Entry 2020-07-02
powerdns-recursor
ge 4.3.0 lt 4.3.2

ge 4.2.0 lt 4.2.3

ge 4.1.0 lt 4.1.17

https://doc.powerdns.com/recursor/security-advisories/index.html
CVE-2020-14196