CVE-2020-12244 PUBLISHED

An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated in SyncRes::processAnswer, allowing an attacker to bypass DNSSEC validation.

EPSS 0.09% · 26.3th percentile

Risk Scores

EPSS Score
0.09%
26.3th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:20.04:LTSpdns-recursor4.2.1-1build1, 4.2.1-1ubuntu0.1~esm1, 4.2.1-1build2
Ubuntu:Pro:16.04:LTSpdns-recursor*, 4.0.0~alpha1-1, 4.0.0~alpha1-2
Ubuntu:Pro:18.04:LTSpdns-recursor4.1.1-1build1, *, 4.1.1-2

Timeline

References

Open in Interactive Console →