Vulnetix
Try Vulnetix Request Demo
CVE-2019-3871 PUBLISHED

A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of data coming from the user when building a HTTP request from a DNS query in the HTTP Connector of the Remote backend, allowing a remote user to cause a denial of service by making the server connect to an invalid endpoint, or possibly information disclosure by making the server connect to an internal endpoint and somehow extracting meaningful information about the response

EPSS 0.03% · 9.2th percentile

Risk Scores

EPSS Score
0.03%
9.2th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:18.04:LTSpdns0, 4.0.4-2, 4.0.4-2build1
Ubuntu:Pro:16.04:LTSpdns4.0.0~alpha2-3build1, 0, 4.0.0~alpha2-3ubuntu0.1~esm1

Timeline

References

Open in Interactive Console →