CVE-2019-3871: Input Validation
A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of data coming from the user when building a HTTP request from a DNS query in the HTTP Connector of the Remote backend, allowing a remote user to cause a denial of service by making the server connect to an invalid endpoint, or possibly information disclosure by making the server connect to an internal endpoint and somehow extracting meaningful information about the response
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-3871?
CVE-2019-3871 is a vulnerability found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7.
How severe is CVE-2019-3871?
CVE-2019-3871 has a severity rating of 8.8 (high).
How can CVE-2019-3871 be exploited?
CVE-2019-3871 can be exploited by a remote user to cause a denial of service by making a HTTP request from a DNS query in the HTTP Connector of the Remote backend.
What is the affected software?
PowerDNS Authoritative Server versions before 4.0.7 and before 4.1.7 are affected.
How can I fix CVE-2019-3871?
To fix CVE-2019-3871, update PowerDNS Authoritative Server to version 4.0.7 or 4.1.7.