CVEvulnerability
CVE-2022-27227
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-03-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Description
In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.
Affected configurations
• powerdns authoritative server (< 4.4.3)
• powerdns authoritative server (>= 4.5.0 < 4.5.4)
• powerdns authoritative server (>= 4.6.0 < 4.6.1)
• powerdns recursor (< 4.4.8)
• powerdns recursor (>= 4.5.0 < 4.5.8)
• powerdns recursor (>= 4.6.0 < 4.6.1)
• fedoraproject fedora 34
• fedoraproject fedora 35
• fedoraproject fedora 36
References
- http://www.openwall.com/lists/oss-security/2022/03/25/1 Mailing List, Patch, Third Party Advisory
- https://doc.powerdns.com/authoritative/security-advisories/index.html Vendor Advisory
- https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2022-01.html Vendor Advisory
- https://docs.powerdns.com/recursor/security-advisories/index.html Vendor Advisory
- https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2022-01.html Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2QKN56VWXUVFOYGUN75N5IRNK66OHTHT/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HEABZA46XYEUWMGSY2GYYVHISBVWEHIO/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPHOFNI7FKM5NNOVDOWO4TBXFAFICCUE/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJSKICB67SPPEGNXCQLZVSWR6QGCN3KP/ lists.fedoraproject.org
- http://www.openwall.com/lists/oss-security/2022/03/25/1 Mailing List, Patch, Third Party Advisory
- https://doc.powerdns.com/authoritative/security-advisories/index.html Vendor Advisory
- https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2022-01.html Vendor Advisory
- https://docs.powerdns.com/recursor/security-advisories/index.html Vendor Advisory
- https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2022-01.html Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2QKN56VWXUVFOYGUN75N5IRNK66OHTHT/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HEABZA46XYEUWMGSY2GYYVHISBVWEHIO/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPHOFNI7FKM5NNOVDOWO4TBXFAFICCUE/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZJSKICB67SPPEGNXCQLZVSWR6QGCN3KP/ lists.fedoraproject.org