CVE-2022-27227
Fixed in a distro release EPSS 5%
In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.
Products: powerdns authoritative_server, powerdns recursor, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | powerdns | 4.6.1-1 |
| Arch Linux | powerdns-recursor | 4.6.1-1 |
| Debian 12 | pdns | 4.6.1-1 |
| Debian 12 | pdns-recursor | 4.6.1-1 |
| Debian 13 | pdns | 4.6.1-1 |
| Debian 13 | pdns-recursor | 4.6.1-1 |
| Debian 14 | pdns | 4.6.1-1 |
| Debian 14 | pdns-recursor | 4.6.1-1 |
| SUSE Package Hub 15 SP3 | pdns-recursor | 4.3.5-bp153.2.3.1 |
| Ubuntu Pro 16.04 LTS | pdns | 4.0.0~alpha2-3ubuntu0.1~esm1 |
| Ubuntu Pro 16.04 LTS | pdns | no fix |
| Ubuntu Pro 16.04 LTS | pdns-recursor | 4.0.0~alpha2-2ubuntu0.1+esm1 |
| Ubuntu Pro 16.04 LTS | pdns-recursor | no fix |
| Ubuntu Pro 18.04 LTS | pdns | 4.1.1-1ubuntu0.1~esm1 |
| Ubuntu Pro 18.04 LTS | pdns-recursor | 4.1.1-2ubuntu0.1~esm1 |
| Ubuntu Pro 20.04 LTS | pdns | 4.2.1-1ubuntu0.1~esm1 |
| Ubuntu Pro 20.04 LTS | pdns-recursor | 4.2.1-1ubuntu0.1~esm1 |
| Ubuntu Pro 22.04 LTS | pdns | 4.5.3-1ubuntu0.1~esm1 |
| Ubuntu Pro 22.04 LTS | pdns-recursor | 4.6.0-1ubuntu1+esm1 |
| openSUSE Leap 15.3 | pdns-recursor | 4.3.5-bp153.2.3.1 |
| openSUSE Tumbleweed | pdns | 4.6.1-1.1 |
| openSUSE Tumbleweed | pdns-recursor | 4.6.1-1.1 |