This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-17482 →

DEBIAN-CVE-2020-17482

An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone...

Original description

The description as published by the source.

An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 pdns

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1"}]}]

Debian:13 pdns

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1"}]}]

Debian:14 pdns

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.1-1"}]}]

References

advisory security-tracker.debian.org