Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-1000003

Fixed in a distro release EPSS 1%

Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.

Published 2018-01-22 · CVE record · OSV

Products: powerdns recursor

Distro releases

ReleasePackageFixed in
Debian 12pdns-recursor4.1.1-1
Debian 13pdns-recursor4.1.1-1
Debian 14pdns-recursor4.1.1-1
SUSE Package Hub 12 SP1pdns-recursor4.1.2-5.1
openSUSE Tumbleweedpdns-recursor4.5.5-1.3