CVE-2019-3807CWE-345

An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of responses received from authoritative servers…

Low · published January 29, 2019

CVSS v3.0
3.7
EPSS
0%
Percentile
29.5
In the wild
Unconfirmed
What it is

An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of responses received from authoritative servers with the AA flag not set were not properly validated, allowing an attacker to bypass DNSSEC validation.

The record
Technical detail
CVSS v3.0
3.7 · LOW
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00368 · 29.5th percentile
Weakness
CWE-345 · Insufficient Verification of Data Authenticity
Published
2019-01-29T17:00Z
EPSS history
Timeline
  • 29 JAN 17:00Z
    An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of responses received from authoritative servers…
    cvelistv5