CVE-2020-10995

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2020-10995
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-10995.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-10995
Related
Published
2020-05-19T17:15:10Z
Modified
2024-10-12T05:32:57.623951Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafted reply by an authoritative name server to amplify the resulting traffic between the recursive and other authoritative name servers. Both types of service can suffer degraded performance as an effect. This is triggered by random subdomains in the NSDNAME in NS records. PowerDNS Recursor 4.1.16, 4.2.2 and 4.3.1 contain a mitigation to limit the impact of this DNS protocol issue.

References

Affected packages

Debian:11 / pdns-recursor

Package

Name
pdns-recursor
Purl
pkg:deb/debian/pdns-recursor?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / pdns-recursor

Package

Name
pdns-recursor
Purl
pkg:deb/debian/pdns-recursor?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / pdns-recursor

Package

Name
pdns-recursor
Purl
pkg:deb/debian/pdns-recursor?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.3.1-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/powerdns/pdns

Affected ranges

Type
GIT
Repo
https://github.com/powerdns/pdns
Events
Introduced
80da1b4773cbdad76755b01c70739059d6f607af
Last affected
f8e019026f5a1eff4b56a90a39c4acac95ae9dc4

Affected versions

auth-4.*

auth-4.2.0-alpha1
auth-4.2.0-beta1
auth-4.2.0-rc1
auth-4.2.0-rc2
auth-4.3.0-alpha1

dnsdist-1.*

dnsdist-1.3.0
dnsdist-1.3.1
dnsdist-1.3.2
dnsdist-1.3.3
dnsdist-1.4.0
dnsdist-1.4.0-alpha1
dnsdist-1.4.0-alpha2
dnsdist-1.4.0-beta1
dnsdist-1.4.0-rc1
dnsdist-1.4.0-rc2
dnsdist-1.4.0-rc3
dnsdist-1.4.0-rc4
dnsdist-1.4.0-rc5

rec-4.*

rec-4.1.0
rec-4.2.0-alpha1
rec-4.2.0-beta1
rec-4.2.0-rc1
rec-4.3.0
rec-4.3.0-alpha1
rec-4.3.0-alpha2
rec-4.3.0-alpha3
rec-4.3.0-beta1
rec-4.3.0-beta2
rec-4.3.0-rc1
rec-4.3.0-rc2