https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 22:50:36 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-38244 cnvd-2017-38244 https://cve.radiocsirt.org/vuln/cnvd-2017-38244 https://cve.radiocsirt.org/vuln/euvd-2026-178265 EUVD-2026-178265 https://cve.radiocsirt.org/vuln/euvd-2026-178265 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15093 <p>When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor&#39;s ACL by adding and removing netmasks, and to configure forward zones. It was discovered that the new netmask and IP addresses of forwarded zones were not sufficiently validated, allowing an authenticated user to inject new configuration directives into the Recursor&#39;s configuration.</p> <p>When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor&#39;s ACL by adding and removing netmasks, and to configure forward zones. It was discovered that the new netmask and IP addresses of forwarded zones were not sufficiently validated, allowing an authenticated user to inject new configuration directives into the Recursor&#39;s configuration.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-15093 https://cve.radiocsirt.org/vuln/ghsa-jc23-xg6p-84pp <p>When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor&#39;s ACL by adding and removing netmasks, and to configure forward zones. It was discovered that the new netmask and IP addresses of forwarded zones were not sufficiently validated, allowing an authenticated user to inject new configuration directives into the Recursor&#39;s configuration.</p> <p>When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor&#39;s ACL by adding and removing netmasks, and to configure forward zones. It was discovered that the new netmask and IP addresses of forwarded zones were not sufficiently validated, allowing an authenticated user to inject new configuration directives into the Recursor&#39;s configuration.</p> https://cve.radiocsirt.org/vuln/ghsa-jc23-xg6p-84pp https://cve.radiocsirt.org/vuln/gsd-2017-15093 gsd-2017-15093 https://cve.radiocsirt.org/vuln/gsd-2017-15093 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11157-1 <p>pdns-recursor-4.5.5-1.3 on GA media</p> <p>pdns-recursor-4.5.5-1.3 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11157-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15093 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: pdns-recursor</p> <p>When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor&#39;s ACL by adding and removing netmasks, and to configure forward zones. It was discovered that the new netmask and IP addresses of forwarded zones were not sufficiently validated, allowing an authenticated user to inject new configuration directives into the Recursor&#39;s configuration.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: pdns-recursor</p> <p>When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor&#39;s ACL by adding and removing netmasks, and to configure forward zones. It was discovered that the new netmask and IP addresses of forwarded zones were not sufficiently validated, allowing an authenticated user to inject new configuration directives into the Recursor&#39;s configuration.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15093