FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-03-28 15:43:32 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
641cd669-bc37-11ea-babf-6805ca2fa271powerdns-recursor -- access restriction bypass

PowerDNS Team reports:

CVE-2020-14196: An issue has been found in PowerDNS Recursor where the ACL applied to the internal web server via webserver-allow-from is not properly enforced, allowing a remote attacker to send HTTP queries to the internal web server, bypassing the restriction. In the default configuration the API webserver is not enabled. Only installations using a non-default value for webserver and webserver-address are affected.


Discovery 2020-07-01
Entry 2020-07-02
powerdns-recursor
ge 4.3.0 lt 4.3.2

ge 4.2.0 lt 4.2.3

ge 4.1.0 lt 4.1.17

https://doc.powerdns.com/recursor/security-advisories/index.html
CVE-2020-14196
5418b360-29cc-11ed-a6d4-6805ca2fa271powerdns-recursor -- denial of service

PowerDNS Team reports:

PowerDNS Security Advisory 2022-02: incomplete exception handling related to protobuf message generation.


Discovery 2022-08-23
Entry 2022-09-01
powerdns-recursor
< 4.7.2

< 4.6.3

< 4.5.10

CVE-2022-37428
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2022-02.html
5418b360-29cc-11ed-a6d4-6805ca2fa271powerdns-recursor -- denial of service

PowerDNS Team reports:

PowerDNS Security Advisory 2022-02: incomplete exception handling related to protobuf message generation.


Discovery 2022-08-23
Entry 2022-09-01
powerdns-recursor
< 4.7.2

< 4.6.3

< 4.5.10

CVE-2022-37428
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2022-02.html
a6860b11-0dee-11eb-94ff-6805ca2fa271powerdns-recursor -- cache pollution

PowerDNS Team reports:

CVE-2020-25829: An issue has been found in PowerDNS Recursor where a remote attacker can cause the cached records for a given name to be updated to the ‘Bogus’ DNSSEC validation state, instead of their actual DNSSEC ‘Secure’ state, via a DNS ANY query. This results in a denial of service for installations that always validate (dnssec=validate) and for clients requesting validation when on-demand validation is enabled (dnssec=process).


Discovery 2020-10-13
Entry 2020-10-14
powerdns-recursor
ge 4.3.0 lt 4.3.5

ge 4.2.0 lt 4.2.5

ge 4.1.0 lt 4.1.18

https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-07.html
CVE-2020-25829
5418b360-29cc-11ed-a6d4-6805ca2fa271powerdns-recursor -- denial of service

PowerDNS Team reports:

PowerDNS Security Advisory 2022-02: incomplete exception handling related to protobuf message generation.


Discovery 2022-08-23
Entry 2022-09-01
powerdns-recursor
< 4.7.2

< 4.6.3

< 4.5.10

CVE-2022-37428
https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2022-02.html