This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-12244 →

DEBIAN-CVE-2020-12244

An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN response lacking an SOA were not pr...

Original description

The description as published by the source.

An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated in SyncRes::processAnswer, allowing an attacker to bypass DNSSEC validation.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 pdns-recursor

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1"}]}]

Debian:13 pdns-recursor

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1"}]}]

Debian:14 pdns-recursor

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1"}]}]

References

advisory security-tracker.debian.org