VULNERABILITY INTELLIGENCE

CVE-2019-3807

CVSS score3.7 LOW
EPSS probability0.37%
CISA KEVNot currently listed
Published2019-01-29
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

Description

An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of responses received from authoritative servers with the AA flag not set were not properly validated, allowing an attacker to bypass DNSSEC validation.

Weakness classification

  • secalert@redhat.com: CWE-345
  • nvd@nist.gov: CWE-295

Primary references