CVE-2020-17482 - An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory

Back Back to CVE browser

MEDIUM

An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory

Published Oct 2, 2020

4.3

MEDIUM

CVSS 3.1

EPSS 2.59%

Description

An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-908

References (3)

https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-05.html
x_refsource_CONFIRMVendor Advisory
https://github.com/PowerDNS/pdns
x_refsource_MISCThird Party Advisory
https://security.gentoo.org/glsa/202012-18
vendor-advisoryx_refsource_GENTOOThird Party Advisory

Link	Providers	Tags
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-05.html		x_refsource_CONFIRMVendor Advisory
https://github.com/PowerDNS/pdns		x_refsource_MISCThird Party Advisory
https://security.gentoo.org/glsa/202012-18		vendor-advisoryx_refsource_GENTOOThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 2, 2020

Updated Aug 4, 2024

Reserved Aug 11, 2020

Link CVE-2020-17482

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-17482

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-17482