CVE-2020-14196

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-07/msg00043.html · Third Party Advisory
• lists.opensuse.org/opensuse-security-announce/2020-09/msg00042.html
• lists.opensuse.org/opensuse-security-announce/2020-09/msg00044.html
• lists.opensuse.org/opensuse-security-announce/2020-10/msg00036.html
• doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-04.html · Vendor Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7TUNCUZNASYSTVD35QGFAI6XO2BFMQ2F
• openwall.com/lists/oss-security/2020/07/01/1 · Mailing List

recursor のその他の脆弱性

• CVE-2026-33601中 4.9If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zone that result in a null pointer derefer…
• CVE-2026-33600中 4.9An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by a missing consistency check and leading …
• CVE-2026-33262中 5.9An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of ser…
• CVE-2026-33261中 5.9A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service.
• CVE-2026-33260高 7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The i…