CVE-2020-17482: Medium severity PowerDNS Authoritative vulnerability
An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/pdnsto a version that resolves this vulnerability.Fixed in 4.4.1-1Fixed in 4.7.3-2Fixed in 4.9.3-1 - Upgrade
Upgrade
alpine/pdnsto a version that resolves this vulnerability.Fixed in 4.1.14-r0 - Upgrade
Upgrade
alpine/pdnsto a version that resolves this vulnerability.Fixed in 4.2.3-r0 - Upgrade
Upgrade
alpine/pdnsto a version that resolves this vulnerability.Fixed in 4.3.1-r0 - Upgrade
Upgrade
PowerDNS Authoritative Serverto a version that resolves this vulnerability.Fixed in 4.3.1
Event History
Frequently Asked Questions
What is CVE-2020-17482?
CVE-2020-17482 is an issue found in PowerDNS Authoritative Server before version 4.3.1, where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.
How severe is CVE-2020-17482?
CVE-2020-17482 has a severity value of 4.3, which is considered medium.
Which software versions are affected by CVE-2020-17482?
PowerDNS Authoritative Server versions up to, but not including, 4.3.1 are affected by CVE-2020-17482.
How can I fix CVE-2020-17482?
To fix CVE-2020-17482, it is recommended to update PowerDNS Authoritative Server to version 4.3.1 or later.
Where can I find more information about CVE-2020-17482?
You can find more information about CVE-2020-17482 in the PowerDNS Advisory, GitHub repository, and Gentoo security advisory linked in the references section.