CVE-2020-14196
Fixed in a distro release EPSS 2%
In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced.
Products: powerdns recursor
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | powerdns-recursor | 4.3.2-1 |
| Debian 10 | pdns-recursor | 4.1.11-1+deb10u2 |
| Debian 12 | pdns-recursor | 4.3.2-1 |
| Debian 13 | pdns-recursor | 4.3.2-1 |
| Debian 14 | pdns-recursor | 4.3.2-1 |
| SUSE Package Hub 12 SP1 | pdns-recursor | 4.3.5-bp152.2.12.1 |
| SUSE Package Hub 12 SP1 | pdns-recursor | 4.1.12-bp151.4.6.1 |
| SUSE Package Hub 15 SP1 | pdns-recursor | 4.3.5-bp152.2.12.1 |
| SUSE Package Hub 15 SP1 | pdns-recursor | 4.1.12-bp151.4.6.1 |
| SUSE Package Hub 15 SP2 | pdns-recursor | 4.3.5-bp152.2.12.1 |
| SUSE Package Hub 15 SP2 | pdns-recursor | 4.1.12-bp152.2.4.1 |
| SUSE Package Hub 15 SP2 | pdns-recursor | 4.3.2-bp152.2.8.1 |
| Ubuntu Pro 16.04 LTS | pdns-recursor | no fix |
| Ubuntu Pro 18.04 LTS | pdns-recursor | no fix |
| Ubuntu Pro 20.04 LTS | pdns-recursor | no fix |
| openSUSE Leap 15.1 | pdns-recursor | 4.1.12-bp151.4.6.1 |
| openSUSE Leap 15.1 | pdns-recursor | 4.3.5-bp152.2.12.1 |
| openSUSE Leap 15.2 | pdns-recursor | 4.1.12-bp151.4.6.1 |
| openSUSE Leap 15.2 | pdns-recursor | 4.3.5-bp152.2.12.1 |
| openSUSE Tumbleweed | pdns-recursor | 4.5.5-1.3 |