CVE-2022-27227

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-27227

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-27227.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2022-27227

Related

Published

2022-03-25T15:15:07Z

Modified

2025-01-08T08:47:30.681089Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.

References

Affected packages

Debian:11 / pdns

Package

Name: pdns
Purl: pkg:deb/debian/pdns?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.4.1-1

4.4.1-2

4.4.1-3

4.4.1-4

4.5.1-1

4.5.2-1

4.5.3-1

4.6.1-1

4.6.2-1

4.6.3-1

4.7.1-1

4.7.2-1

4.7.3-1

4.7.3-2

4.8.0-1

4.8.0-2

4.8.1-1

4.8.1-2

4.8.2-1

4.8.2-2

4.8.3-1

4.8.3-2

4.8.3-3

4.8.3-4

4.9.0-1

4.9.0-2

4.9.1-1

4.9.1-2

4.9.1-3

4.9.2-1

4.9.2-2

4.9.3-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / pdns

Package

Name: pdns
Purl: pkg:deb/debian/pdns?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.6.1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / pdns

Package

Name: pdns
Purl: pkg:deb/debian/pdns?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.6.1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:11 / pdns-recursor

Package

Name: pdns-recursor
Purl: pkg:deb/debian/pdns-recursor?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.4.2-3

4.5.5-1

4.5.6-1

4.5.7-1

4.6.0-1

4.6.1-1

4.6.2-1

4.7.1-1

4.7.2-1

4.7.3-1

4.7.3-2

4.7.4-1

4.8.0-1

4.8.0-2

4.8.1-1

4.8.2-1

4.8.4-1

4.8.6-1

4.8.7-1

4.8.8-1

4.9.0-1

4.9.0-2

4.9.1-1

4.9.1-2

4.9.1-3

4.9.1-4

4.9.2-1

4.9.2-2

4.9.3-1

4.9.4-1

4.9.5-1

5.*

5.0.5-1

5.0.7-1

5.0.7-2

5.0.9-1

5.1.3-1

Ecosystem specific

{
    "urgency": "end-of-life"
}

Debian:12 / pdns-recursor

Package

Name: pdns-recursor
Purl: pkg:deb/debian/pdns-recursor?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.6.1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / pdns-recursor

Package

Name: pdns-recursor
Purl: pkg:deb/debian/pdns-recursor?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.6.1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/powerdns/pdns

Affected ranges

Type: GIT
Repo: https://github.com/powerdns/pdns
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

8c642b6c559a4f266e3bc16e994475ba8ff23ab5

Affected versions

auth-3.*

auth-3.1-rc1

auth-3.1-rc2

auth-3.1-rc3

auth-3.2-rc1

auth-3.2-rc2

auth-3.2-rc3

auth-3.2-rc4

auth-3.3

auth-3.3-rc1

auth-3.3-rc2

auth-3.4.0

auth-3.4.0-rc1

auth-3.4.0-rc2

auth-4.*

auth-4.0.0

auth-4.0.0-alpha1

auth-4.0.0-alpha2

auth-4.0.0-alpha3

auth-4.0.0-beta1

auth-4.0.0-rc1

auth-4.0.0-rc2

auth-4.0.1

auth-4.1.0

auth-4.1.0-rc1

auth-4.1.0-rc2

auth-4.1.0-rc3

auth-4.2.0-alpha1

auth-4.2.0-beta1

auth-4.2.0-rc1

auth-4.2.0-rc2

auth-4.3.0-alpha1

auth-4.3.0-beta1

auth-4.3.0-beta2

auth-4.3.0-rc1

auth-4.4.0-alpha0

dnsdist-1.*

dnsdist-1.0.0

dnsdist-1.0.0-alpha1

dnsdist-1.0.0-alpha2

dnsdist-1.0.0-beta1

dnsdist-1.1.0

dnsdist-1.1.0-beta1

dnsdist-1.1.0-beta2

dnsdist-1.2.0

dnsdist-1.3.0

dnsdist-1.3.1

dnsdist-1.3.2

dnsdist-1.3.3

dnsdist-1.4.0

dnsdist-1.4.0-alpha1

dnsdist-1.4.0-alpha2

dnsdist-1.4.0-beta1

dnsdist-1.4.0-rc1

dnsdist-1.4.0-rc2

dnsdist-1.4.0-rc3

dnsdist-1.4.0-rc4

dnsdist-1.4.0-rc5

dnsdist-1.5.0

dnsdist-1.5.0-alpha1

dnsdist-1.5.0-rc1

dnsdist-1.5.0-rc2

dnsdist-1.5.0-rc3

dnsdist-1.5.0-rc4

Other

rec-3-0

rec-3-0-1

rec-3.*

rec-3.0

rec-3.0.1

rec-3.1.4

rec-3.3.1

rec-3.5

rec-3.5-rc1

rec-3.5-rc3

rec-3.5-rc4

rec-3.5-rc5

rec-3.6.0

rec-3.6.0-rc1

rec-3.7.0

rec-3.7.0-rc1

rec-3.7.0-rc2

rec-4.*

rec-4.0.0

rec-4.0.0-alpha1

rec-4.0.0-alpha2

rec-4.0.0-alpha3

rec-4.0.0-beta1

rec-4.0.0-rc1

rec-4.0.1

rec-4.0.2

rec-4.1.0

rec-4.1.0-alpha1

rec-4.1.0-rc1

rec-4.1.0-rc2

rec-4.1.0-rc3

rec-4.2.0-alpha1

rec-4.2.0-beta1

rec-4.2.0-rc1

rec-4.3.0-alpha1

rec-4.3.0-alpha2

rec-4.3.0-alpha3

rec-4.3.0-beta1

rec-4.4.0

rec-4.4.0-alpha0

rec-4.4.0-alpha1

rec-4.4.0-alpha2

rec-4.4.0-beta1

rec-4.4.0-rc1

rec-4.4.0-rc2

rec-4.4.1

rec-4.4.2