Input validation error in PowerDNS - CVE-2016-7074

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU32140

Input validation error in PowerDNS - CVE-2016-7074

Published: September 11, 2018 / Updated: July 28, 2020


Vulnerability identifier: #VU32140
CSH Severity: Medium
CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2016-7074
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to manipulate data.

An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check that the TSIG record is the last one, leading to the possibility of parsing records that are not covered by the TSIG signature.


Affected software

PowerDNS
Arch Linux
Fedora
Cisco Secure Access Control
pdns (Alpine package)
pdns-recursor (Alpine package)
pdns
pdns-recursor

How to mitigate CVE-2016-7074

Install update from vendor's website.

PowerDNS - update to 3.4.11
pdns (Alpine package) - update to 4.0.3-r0
pdns-recursor (Alpine package) - update to 4.0.4-r0
pdns - addressed in versions 3.4.11-1.el7, 4.0.3-1.fc24, 4.0.3-1.fc25
pdns-recursor - addressed in versions 3.7.4-1.el6, 3.7.4-1.el7, 4.0.4-1.fc24, 4.0.4-1.fc25

External References

Related Security Bulletins