CVE-2019-3807: Critical severity powerdns vulnerability
An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of responses received from authoritative servers with the AA flag not set were not properly validated, allowing an attacker to bypass DNSSEC validation.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-3807?
CVE-2019-3807 is a vulnerability found in PowerDNS Recursor versions 4.1.x before 4.1.9.
What is the severity of CVE-2019-3807?
CVE-2019-3807 has a severity rating of critical (9.8).
How does CVE-2019-3807 affect PowerDNS Recursor?
CVE-2019-3807 allows an attacker to bypass DNSSEC validation in PowerDNS Recursor versions 4.1.x before 4.1.9.
How can I fix CVE-2019-3807?
To fix CVE-2019-3807, update PowerDNS Recursor to version 4.1.9 or later.
Where can I find more information about CVE-2019-3807?
For more information about CVE-2019-3807, you can refer to the following references: [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3807) and [PowerDNS Advisory](https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2019-02.html).