CVE-2020-17482 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2020-17482 Interim 1 26 2025-02-17T01:19:33Z current 2021-05-30T14:43:12Z 2025-02-17T01:19:33Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2020-17482 An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2020-September/007467.html E-Mail link for SUSE-SU-2020:2718-1 https://lists.suse.com/pipermail/sle-security-updates/2020-September/007502.html E-Mail link for SUSE-SU-2020:2785-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QFEC5JUF7ZEJL5FSPURV27CYZCQG2I2Z/ E-Mail link for openSUSE-SU-2020:1556-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 HPE Helion OpenStack Cloud 8 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE Package Hub 12 SP1 SUSE Package Hub 15 SP1 SUSE Package Hub 15 SP2 openSUSE Leap 15.1 openSUSE Leap 15.2 openSUSE Tumbleweed pdns pdns-4.1.14-23.1 pdns-4.1.2-3.9.1 pdns-4.1.8-3.6.1 pdns-4.1.8-bp151.3.9.2 pdns-4.1.8-lp151.2.9.1 pdns-4.3.1-bp152.2.5.1 pdns-4.3.1-lp152.2.3.1 pdns-4.5.1-1.5 pdns-backend-geoip-4.1.8-bp151.3.9.2 pdns-backend-geoip-4.1.8-lp151.2.9.1 pdns-backend-geoip-4.3.1-bp152.2.5.1 pdns-backend-geoip-4.3.1-lp152.2.3.1 pdns-backend-geoip-4.5.1-1.5 pdns-backend-godbc-4.1.14-23.1 pdns-backend-godbc-4.1.8-bp151.3.9.2 pdns-backend-godbc-4.1.8-lp151.2.9.1 pdns-backend-godbc-4.3.1-bp152.2.5.1 pdns-backend-godbc-4.3.1-lp152.2.3.1 pdns-backend-godbc-4.5.1-1.5 pdns-backend-ldap-4.1.14-23.1 pdns-backend-ldap-4.1.8-bp151.3.9.2 pdns-backend-ldap-4.1.8-lp151.2.9.1 pdns-backend-ldap-4.3.1-bp152.2.5.1 pdns-backend-ldap-4.3.1-lp152.2.3.1 pdns-backend-ldap-4.5.1-1.5 pdns-backend-lmdb-4.5.1-1.5 pdns-backend-lua-4.1.14-23.1 pdns-backend-lua-4.1.8-bp151.3.9.2 pdns-backend-lua-4.1.8-lp151.2.9.1 pdns-backend-lua-4.3.1-bp152.2.5.1 pdns-backend-lua-4.3.1-lp152.2.3.1 pdns-backend-lua-4.5.1-1.5 pdns-backend-mydns-4.1.14-23.1 pdns-backend-mydns-4.1.8-bp151.3.9.2 pdns-backend-mydns-4.1.8-lp151.2.9.1 pdns-backend-mysql-4.1.14-23.1 pdns-backend-mysql-4.1.2-3.9.1 pdns-backend-mysql-4.1.8-3.6.1 pdns-backend-mysql-4.1.8-bp151.3.9.2 pdns-backend-mysql-4.1.8-lp151.2.9.1 pdns-backend-mysql-4.3.1-bp152.2.5.1 pdns-backend-mysql-4.3.1-lp152.2.3.1 pdns-backend-mysql-4.5.1-1.5 pdns-backend-postgresql-4.1.14-23.1 pdns-backend-postgresql-4.1.8-bp151.3.9.2 pdns-backend-postgresql-4.1.8-lp151.2.9.1 pdns-backend-postgresql-4.3.1-bp152.2.5.1 pdns-backend-postgresql-4.3.1-lp152.2.3.1 pdns-backend-postgresql-4.5.1-1.5 pdns-backend-remote-4.1.14-23.1 pdns-backend-remote-4.1.8-bp151.3.9.2 pdns-backend-remote-4.1.8-lp151.2.9.1 pdns-backend-remote-4.3.1-bp152.2.5.1 pdns-backend-remote-4.3.1-lp152.2.3.1 pdns-backend-remote-4.5.1-1.5 pdns-backend-sqlite3-4.1.14-23.1 pdns-backend-sqlite3-4.1.8-bp151.3.9.2 pdns-backend-sqlite3-4.1.8-lp151.2.9.1 pdns-backend-sqlite3-4.3.1-bp152.2.5.1 pdns-backend-sqlite3-4.3.1-lp152.2.3.1 pdns-backend-sqlite3-4.5.1-1.5 pdns-4.1.2-3.9.1 as a component of HPE Helion OpenStack 8 pdns-backend-mysql-4.1.2-3.9.1 as a component of HPE Helion OpenStack 8 pdns-4.1.2-3.9.1 as a component of SUSE OpenStack Cloud 8 pdns-backend-mysql-4.1.2-3.9.1 as a component of SUSE OpenStack Cloud 8 pdns-4.1.8-3.6.1 as a component of SUSE OpenStack Cloud 9 pdns-backend-mysql-4.1.8-3.6.1 as a component of SUSE OpenStack Cloud 9 pdns-4.1.14-23.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-geoip-4.3.1-lp152.2.3.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-godbc-4.1.14-23.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-ldap-4.1.14-23.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-lua-4.1.14-23.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-mydns-4.1.14-23.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-mysql-4.1.14-23.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-postgresql-4.1.14-23.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-remote-4.1.14-23.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-sqlite3-4.1.14-23.1 as a component of SUSE Package Hub 12 SP1 pdns-4.1.8-bp151.3.9.2 as a component of SUSE Package Hub 15 SP1 pdns-backend-geoip-4.1.8-bp151.3.9.2 as a component of SUSE Package Hub 15 SP1 pdns-backend-godbc-4.1.8-bp151.3.9.2 as a component of SUSE Package Hub 15 SP1 pdns-backend-ldap-4.1.8-bp151.3.9.2 as a component of SUSE Package Hub 15 SP1 pdns-backend-lua-4.1.8-bp151.3.9.2 as a component of SUSE Package Hub 15 SP1 pdns-backend-mydns-4.1.8-bp151.3.9.2 as a component of SUSE Package Hub 15 SP1 pdns-backend-mysql-4.1.8-bp151.3.9.2 as a component of SUSE Package Hub 15 SP1 pdns-backend-postgresql-4.1.8-bp151.3.9.2 as a component of SUSE Package Hub 15 SP1 pdns-backend-remote-4.1.8-bp151.3.9.2 as a component of SUSE Package Hub 15 SP1 pdns-backend-sqlite3-4.1.8-bp151.3.9.2 as a component of SUSE Package Hub 15 SP1 pdns-4.3.1-bp152.2.5.1 as a component of SUSE Package Hub 15 SP2 pdns-backend-geoip-4.3.1-bp152.2.5.1 as a component of SUSE Package Hub 15 SP2 pdns-backend-godbc-4.3.1-bp152.2.5.1 as a component of SUSE Package Hub 15 SP2 pdns-backend-ldap-4.3.1-bp152.2.5.1 as a component of SUSE Package Hub 15 SP2 pdns-backend-lua-4.3.1-bp152.2.5.1 as a component of SUSE Package Hub 15 SP2 pdns-backend-mydns-4.1.8-bp151.3.9.2 as a component of SUSE Package Hub 15 SP2 pdns-backend-mysql-4.3.1-bp152.2.5.1 as a component of SUSE Package Hub 15 SP2 pdns-backend-postgresql-4.3.1-bp152.2.5.1 as a component of SUSE Package Hub 15 SP2 pdns-backend-remote-4.3.1-bp152.2.5.1 as a component of SUSE Package Hub 15 SP2 pdns-backend-sqlite3-4.3.1-bp152.2.5.1 as a component of SUSE Package Hub 15 SP2 pdns-4.1.8-lp151.2.9.1 as a component of openSUSE Leap 15.1 pdns-backend-geoip-4.1.8-lp151.2.9.1 as a component of openSUSE Leap 15.1 pdns-backend-godbc-4.1.8-lp151.2.9.1 as a component of openSUSE Leap 15.1 pdns-backend-ldap-4.1.8-lp151.2.9.1 as a component of openSUSE Leap 15.1 pdns-backend-lua-4.1.8-lp151.2.9.1 as a component of openSUSE Leap 15.1 pdns-backend-mydns-4.1.8-lp151.2.9.1 as a component of openSUSE Leap 15.1 pdns-backend-mysql-4.1.8-lp151.2.9.1 as a component of openSUSE Leap 15.1 pdns-backend-postgresql-4.1.8-lp151.2.9.1 as a component of openSUSE Leap 15.1 pdns-backend-remote-4.1.8-lp151.2.9.1 as a component of openSUSE Leap 15.1 pdns-backend-sqlite3-4.1.8-lp151.2.9.1 as a component of openSUSE Leap 15.1 pdns-4.3.1-lp152.2.3.1 as a component of openSUSE Leap 15.2 pdns-backend-geoip-4.3.1-lp152.2.3.1 as a component of openSUSE Leap 15.2 pdns-backend-godbc-4.3.1-lp152.2.3.1 as a component of openSUSE Leap 15.2 pdns-backend-ldap-4.3.1-lp152.2.3.1 as a component of openSUSE Leap 15.2 pdns-backend-lua-4.3.1-lp152.2.3.1 as a component of openSUSE Leap 15.2 pdns-backend-mydns-4.1.8-lp151.2.9.1 as a component of openSUSE Leap 15.2 pdns-backend-mysql-4.3.1-lp152.2.3.1 as a component of openSUSE Leap 15.2 pdns-backend-postgresql-4.3.1-lp152.2.3.1 as a component of openSUSE Leap 15.2 pdns-backend-remote-4.3.1-lp152.2.3.1 as a component of openSUSE Leap 15.2 pdns-backend-sqlite3-4.3.1-lp152.2.3.1 as a component of openSUSE Leap 15.2 pdns-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-geoip-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-godbc-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-ldap-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-lmdb-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-lua-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-mysql-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-postgresql-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-remote-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-sqlite3-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns as a component of HPE Helion OpenStack Cloud 8 An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialized memory. CVE-2020-17482 HPE Helion OpenStack 8:pdns-4.1.2-3.9.1 HPE Helion OpenStack 8:pdns-backend-mysql-4.1.2-3.9.1 SUSE OpenStack Cloud 8:pdns-4.1.2-3.9.1 SUSE OpenStack Cloud 8:pdns-backend-mysql-4.1.2-3.9.1 SUSE OpenStack Cloud 9:pdns-4.1.8-3.6.1 SUSE OpenStack Cloud 9:pdns-backend-mysql-4.1.8-3.6.1 SUSE Package Hub 12 SP1:pdns-4.1.14-23.1 SUSE Package Hub 12 SP1:pdns-backend-geoip-4.3.1-lp152.2.3.1 SUSE Package Hub 12 SP1:pdns-backend-godbc-4.1.14-23.1 SUSE Package Hub 12 SP1:pdns-backend-ldap-4.1.14-23.1 SUSE Package Hub 12 SP1:pdns-backend-lua-4.1.14-23.1 SUSE Package Hub 12 SP1:pdns-backend-mydns-4.1.14-23.1 SUSE Package Hub 12 SP1:pdns-backend-mysql-4.1.14-23.1 SUSE Package Hub 12 SP1:pdns-backend-postgresql-4.1.14-23.1 SUSE Package Hub 12 SP1:pdns-backend-remote-4.1.14-23.1 SUSE Package Hub 12 SP1:pdns-backend-sqlite3-4.1.14-23.1 SUSE Package Hub 15 SP1:pdns-4.1.8-bp151.3.9.2 SUSE Package Hub 15 SP1:pdns-backend-geoip-4.1.8-bp151.3.9.2 SUSE Package Hub 15 SP1:pdns-backend-godbc-4.1.8-bp151.3.9.2 SUSE Package Hub 15 SP1:pdns-backend-ldap-4.1.8-bp151.3.9.2 SUSE Package Hub 15 SP1:pdns-backend-lua-4.1.8-bp151.3.9.2 SUSE Package Hub 15 SP1:pdns-backend-mydns-4.1.8-bp151.3.9.2 SUSE Package Hub 15 SP1:pdns-backend-mysql-4.1.8-bp151.3.9.2 SUSE Package Hub 15 SP1:pdns-backend-postgresql-4.1.8-bp151.3.9.2 SUSE Package Hub 15 SP1:pdns-backend-remote-4.1.8-bp151.3.9.2 SUSE Package Hub 15 SP1:pdns-backend-sqlite3-4.1.8-bp151.3.9.2 SUSE Package Hub 15 SP2:pdns-4.3.1-bp152.2.5.1 SUSE Package Hub 15 SP2:pdns-backend-geoip-4.3.1-bp152.2.5.1 SUSE Package Hub 15 SP2:pdns-backend-godbc-4.3.1-bp152.2.5.1 SUSE Package Hub 15 SP2:pdns-backend-ldap-4.3.1-bp152.2.5.1 SUSE Package Hub 15 SP2:pdns-backend-lua-4.3.1-bp152.2.5.1 SUSE Package Hub 15 SP2:pdns-backend-mydns-4.1.8-bp151.3.9.2 SUSE Package Hub 15 SP2:pdns-backend-mysql-4.3.1-bp152.2.5.1 SUSE Package Hub 15 SP2:pdns-backend-postgresql-4.3.1-bp152.2.5.1 SUSE Package Hub 15 SP2:pdns-backend-remote-4.3.1-bp152.2.5.1 SUSE Package Hub 15 SP2:pdns-backend-sqlite3-4.3.1-bp152.2.5.1 openSUSE Leap 15.1:pdns-4.1.8-lp151.2.9.1 openSUSE Leap 15.1:pdns-backend-geoip-4.1.8-lp151.2.9.1 openSUSE Leap 15.1:pdns-backend-godbc-4.1.8-lp151.2.9.1 openSUSE Leap 15.1:pdns-backend-ldap-4.1.8-lp151.2.9.1 openSUSE Leap 15.1:pdns-backend-lua-4.1.8-lp151.2.9.1 openSUSE Leap 15.1:pdns-backend-mydns-4.1.8-lp151.2.9.1 openSUSE Leap 15.1:pdns-backend-mysql-4.1.8-lp151.2.9.1 openSUSE Leap 15.1:pdns-backend-postgresql-4.1.8-lp151.2.9.1 openSUSE Leap 15.1:pdns-backend-remote-4.1.8-lp151.2.9.1 openSUSE Leap 15.1:pdns-backend-sqlite3-4.1.8-lp151.2.9.1 openSUSE Leap 15.2:pdns-4.3.1-lp152.2.3.1 openSUSE Leap 15.2:pdns-backend-geoip-4.3.1-lp152.2.3.1 openSUSE Leap 15.2:pdns-backend-godbc-4.3.1-lp152.2.3.1 openSUSE Leap 15.2:pdns-backend-ldap-4.3.1-lp152.2.3.1 openSUSE Leap 15.2:pdns-backend-lua-4.3.1-lp152.2.3.1 openSUSE Leap 15.2:pdns-backend-mydns-4.1.8-lp151.2.9.1 openSUSE Leap 15.2:pdns-backend-mysql-4.3.1-lp152.2.3.1 openSUSE Leap 15.2:pdns-backend-postgresql-4.3.1-lp152.2.3.1 openSUSE Leap 15.2:pdns-backend-remote-4.3.1-lp152.2.3.1 openSUSE Leap 15.2:pdns-backend-sqlite3-4.3.1-lp152.2.3.1 openSUSE Tumbleweed:pdns-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-geoip-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-godbc-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-ldap-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-lmdb-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-lua-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-mysql-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-postgresql-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-remote-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-sqlite3-4.5.1-1.5 moderate 4 AV:N/AC:L/Au:S/C:P/I:N/A:N 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N