This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2018-14626 →
DEBIAN-CVE-2018-14626
PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerable to a packet cache pollution...
Original description
The description as published by the source.
PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerable to a packet cache pollution via crafted query that can lead to denial of service.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
pdns
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-1"}]}]
Debian:13
pdns
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-1"}]}]
Debian:14
pdns
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.5-1"}]}]
Debian:12
pdns-recursor
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.7-1"}]}]
Debian:13
pdns-recursor
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.7-1"}]}]
Debian:14
pdns-recursor
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.7-1"}]}]
References
- advisory security-tracker.debian.org