Improper access control in PowerDNS Recursor - CVE-2020-14196

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU29577

Improper access control in PowerDNS Recursor - CVE-2020-14196

Published: July 8, 2020 / Updated: July 15, 2020


Vulnerability identifier: #VU29577
CSH Severity: Medium
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-14196
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to  ACL applied to the internal web server via "webserver-allow-from" is not properly enforced. A remote attacker can send HTTP queries to the internal web server, bypassing the restriction.

Successful exploitation of the vulnerability requires that the the API webserver is enabled (not the default value).


Affected software

PowerDNS Recursor
Arch Linux
Fedora
SUSE Linux
Opensuse
pdns-recursor (Alpine package)
pdns-recursor
SUSE Package Hub for SUSE Linux Enterprise

How to mitigate CVE-2020-14196

Install updates from vendor's website.

PowerDNS Recursor - addressed in versions 4.1.17, 4.2.3, 4.3.2
pdns-recursor (Alpine package) - update to 4.3.2-r0
pdns-recursor - addressed in versions 4.3.4-1.fc33, 4.3.5-1.el8

External References

Related Security Bulletins