CVE-2019-10163

A Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8 allowing a remote, authorized master server…

Low3.5EPSS 1.0%

Published: 30 Jul 2019
Updated: 4 Aug 2024
Reserved: 27 Mar 2019
Assigned by: redhat

Description

A Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8 allowing a remote, authorized master server to cause a high CPU load or even prevent any further updates to any slave zone by sending a large number of NOTIFY messages. Note that only servers configured as slaves are affected by this issue.

Scores

CVSS scores of CVE-2019-10163, by who scored it
Scored by	CVSS	Score	Vector
redhatCNA (assigner)	3.0	Low3.5	CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
NVDNVD · Modified	3.1	Medium4.3	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS (exploitation in 30 days): 1.0% · top 37% of all CVEs (3 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Low 3.5.

Weakness

CWE-770 (opens in a new tab)All about CWE-770 and its CVEs

Affected products

PowerDNS · pdns
- affected fixed in 4.1.9
- affected fixed in 4.0.8

References (5)

openSUSE-SU-2019:1904 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
openSUSE-SU-2019:1921 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
https://blog.powerdns.com/2019/06/21/powerdns-authoritative-server-4-0-8-and-4-1-10-released/ (opens in a new tab)x_refsource_CONFIRMx_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10163 (opens in a new tab)x_refsource_CONFIRMx_transferred
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2019-05.html (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2019-10163](https://trackcve.app/badge/CVE-2019-10163.svg)](https://trackcve.app/cve/CVE-2019-10163)

Record last updated 4 Aug 2024, 22:10 UTC.