CVE-2017-15090
Summary
| CVE | CVE-2017-15090 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-01-23 15:29:00 UTC |
| Updated | 2019-10-09 23:24:00 UTC |
| Description | An issue has been found in the DNSSEC validation component of PowerDNS Recursor from 4.0.0 and up to and including 4.0.6, where the signatures might have been accepted as valid even if the signed data was not in bailiwick of the DNSKEY used to sign it. This allows an attacker in position of man-in-the-middle to alter the content of records by issuing a valid signature for the crafted records. |
Risk And Classification
Problem Types: CWE-347
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| PowerDNS Security Advisory 2017-03: Insufficient validation of DNSSEC signatures — PowerDNS Recursor documentation | CONFIRM | doc.powerdns.com | Patch, Vendor Advisory |
| 101982 | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 501110 Alpine Linux Security Update for pdns-recursor