Debian/pdns-recursor: medium 5.3
When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized use
Action: Upgrade pdns-recursor to 4.0.7-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.7-1 | - |
Fixed versions
| 4.0.7-1 |
Sources
- osv: DEBIAN-CVE-2017-15093#Debian:13/pdns-recursor
- https://security-tracker.debian.org/tracker/CVE-2017-15093
published · modified · JSON