Vulnerabilities > CVE-2022-27227

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

powerdns

fedoraproject

NVD

Published: 2022-03-25

Updated: 2023-11-07

Summary

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.

Vulnerable Configurations

Part	Description	Count
Application	Powerdns Powerdns Recursor 4.6.0 Powerdns Recursor 4.5.0 Powerdns Recursor 4.5.1 Powerdns Recursor 4.5.2 Powerdns Recursor 4.5.4 Powerdns Recursor 4.5.5 Powerdns Recursor 4.5.6 Powerdns Recursor 4.5.7 Powerdns Recursor 3.0 Powerdns Recursor 3.0.1 Powerdns Recursor 3.1.1 Powerdns Recursor 3.1.2 Powerdns Recursor 3.1.3 Powerdns Recursor 3.1.4 Powerdns Recursor 3.1.5 Powerdns Recursor 3.1.6 Powerdns Recursor 3.1.7 Powerdns Recursor 3.1.7.1 Powerdns Recursor 3.1.7.2 Powerdns Recursor 3.2 Powerdns Recursor 3.3 Powerdns Recursor 3.3.1 Powerdns Recursor 3.5 Powerdns Recursor 3.5.1 Powerdns Recursor 3.5.2 Powerdns Recursor 3.5.3 Powerdns Recursor 3.6.0 Powerdns Recursor 3.6.1 Powerdns Recursor 3.6.2 Powerdns Recursor 3.6.3 Powerdns Recursor 3.6.4 Powerdns Recursor 3.7.0 Powerdns Recursor 3.7.1 Powerdns Recursor 3.7.2 Powerdns Recursor 3.7.3 Powerdns Recursor 3.7.4 Powerdns Recursor 4.0.0 Powerdns Recursor 4.0.1 Powerdns Recursor 4.0.2 Powerdns Recursor 4.0.3 Powerdns Recursor 4.0.4 Powerdns Recursor 4.0.5 Powerdns Recursor 4.0.6 Powerdns Recursor 4.0.7 Powerdns Recursor 4.0.8 Powerdns Recursor 4.1.0 Powerdns Recursor 4.1.1 Powerdns Recursor 4.1.2 Powerdns Recursor 4.1.3 Powerdns Recursor 4.1.4 Powerdns Recursor 4.1.5 Powerdns Recursor 4.1.6 Powerdns Recursor 4.1.7 Powerdns Recursor 4.1.8 Powerdns Recursor 4.1.9 Powerdns Recursor 4.1.10 Powerdns Recursor 4.1.11 Powerdns Recursor 4.1.12 Powerdns Recursor 4.1.13 Powerdns Recursor 4.1.14 Powerdns Recursor 4.1.15 Powerdns Recursor 4.1.16 Powerdns Recursor 4.1.17 Powerdns Recursor 4.1.18 Powerdns Recursor 4.2.0 Powerdns Recursor 4.2.1 Powerdns Recursor 4.2.2 Powerdns Recursor 4.2.3 Powerdns Recursor 4.2.4 Powerdns Recursor 4.2.5 Powerdns Recursor 4.3.0 Powerdns Recursor 4.3.1 Powerdns Recursor 4.3.2 Powerdns Recursor 4.3.3 Powerdns Recursor 4.3.4 Powerdns Recursor 4.3.5 Powerdns Recursor 4.3.6 Powerdns Recursor 4.3.7 Powerdns Recursor 4.4.0 Powerdns Recursor 4.4.1 Powerdns Recursor 4.4.2 Powerdns Recursor 4.4.3 Powerdns Recursor 4.4.4 Powerdns Recursor 4.4.5 Powerdns Recursor 4.4.6 Powerdns Recursor 4.4.7 Powerdns Authoritative Server 4.6.0 Powerdns Authoritative Server 4.5.0 Powerdns Authoritative Server 4.5.1 Powerdns Authoritative Server 4.5.2 Powerdns Authoritative Server 4.5.3 Powerdns Authoritative Server 2.9.22 Powerdns Authoritative Server 3.0 Powerdns Authoritative Server 4.0.0 Powerdns Authoritative Server 4.0.1 Powerdns Authoritative Server 4.0.2 Powerdns Authoritative Server 4.0.3 Powerdns Authoritative Server 4.0.4 Powerdns Authoritative Server 4.0.5 Powerdns Authoritative Server 4.0.6 Powerdns Authoritative Server 4.0.7 Powerdns Authoritative Server 4.0.9 Powerdns Authoritative Server 4.1.0 Powerdns Authoritative Server 4.1.1 Powerdns Authoritative Server 4.1.2 Powerdns Authoritative Server 4.1.3 Powerdns Authoritative Server 4.1.4 Powerdns Authoritative Server 4.1.5 Powerdns Authoritative Server 4.1.6 Powerdns Authoritative Server 4.1.7 Powerdns Authoritative Server 4.1.8 Powerdns Authoritative Server 4.1.11 Powerdns Authoritative Server 4.4.1 Powerdns Authoritative Server 4.4.2	165
OS	Fedoraproject Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36	3

Vulnerabilities > CVE-2022-27227 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2022-27227"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2022-27227