Security restrictions bypass in PowerDNS Recursor

Published: 2019-02-01

Risk	Low
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2019-3806 CVE-2019-3807
CWE-ID	CWE-264
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	PowerDNS Recursor Server applications / DNS servers
Vendor	PowerDNS.COM B.V.

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Security restrictions bypass

EUVDB-ID: #VU17347

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2019-3806

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote attacker to bypass security restrictions.

The vulnerability exists due to Lua hooks are not properly applied to queries received over TCP in some specific combination of settings. A remote attacker can bypass security policies enforced using Lua.

Mitigation

Update to version 4.1.9.

Vulnerable software versions

PowerDNS Recursor: 4.1.4 - 4.1.8

CPE2.3

cpe:2.3:a:powerdns_com_b_v:powerdns_recursor:4.1.4:*:*:*:*:*:*:*

External links

http://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2019-01.html

Q & A

Can this vulnerability be exploited remotely?

How the attacker can exploit this vulnerability?

Is there known malware, which exploits this vulnerability?

2) Security restrictions bypass

EUVDB-ID: #VU17348