OpenSUSE Linux update for pdns-recursor

Published: 2019-02-06

Risk	Low
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2019-3806 CVE-2019-3807
CWE-ID	CWE-264
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	PowerDNS Recursor Server applications / DNS servers
Vendor	PowerDNS.COM B.V.

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Security restrictions bypass

EUVDB-ID: #VU17347

Risk: Low

CVSSv3.1: 6.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2019-3806

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote attacker to bypass security restrictions.

The vulnerability exists due to Lua hooks are not properly applied to queries received over TCP in some specific combination of settings. A remote attacker can bypass security policies enforced using Lua.

Mitigation

Update the affected packages.

Vulnerable software versions

PowerDNS Recursor: 4.1.4 - 4.1.8

External links

http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00002.html

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Security restrictions bypass

EUVDB-ID: #VU17348