CVE-2016-7073

published 2018-09-11

CVE-2016-7073: An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter…

Priority P4 30 medium 5.9 CVSS 3.0

AV N AC H PR N UI N S U C N I H A N

An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check of the TSIG time and fudge values was found in AXFRRetriever, leading to a possible replay attack.

Affected

14 ranges

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	pdns	< pdns 4.0.2-1 (bookworm)	pdns 4.0.2-1 (bookworm)
debian	pdns-recursor	< pdns 4.0.2-1 (bookworm)	pdns 4.0.2-1 (bookworm)
open-xchange	pdns	—	—
open-xchange	pdns	—	—
open-xchange	pdns	—	—
open-xchange	pdns	>= 0 < 4.0.2-1	4.0.2-1
open-xchange	pdns	>= 0 < 4.0.2-1	4.0.2-1
open-xchange	pdns	>= 0 < 4.0.2-1	4.0.2-1
open-xchange	pdns	>= 0 < 4.0.2-1	4.0.2-1
powerdns	authoritative	< 3.4.11	3.4.11
powerdns	authoritative	>= 4.0.0 < 4.0.2	4.0.2
powerdns	recursor	< 3.7.4	3.7.4
powerdns	recursor	>= 4.0.0 < 4.0.4	4.0.4

CVSS provenance

nvd v3.0 5.9 MEDIUM CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

nvd v2.0 4.3 MEDIUM AV:N/AC:M/Au:N/C:N/I:P/A:N

osv 5.9 MEDIUM

vendor_debian 5.3 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20