{"action":"Upgrade pdns-recursor to 4.3.1-1 or later.","affected":[{"fixed":"4.3.1-1","introduced":"0"}],"component":"pdns-recursor","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["4.3.1-1"],"id":"tcs_01M5NEEHCTPXEE29E89NQGMW7S","modified_at":"2026-10-26T12:00:06.441792884Z","published_at":"2020-05-19T16:15:10.917Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-10030","https://security-tracker.debian.org/tracker/CVE-2020-10030"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-10030#Debian:14/pdns-recursor","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-10030"}],"summary":"An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker (with enough privileges to change the system's hostname) to cause disclosure of uninitialized memory"}