CVE-2016-7073 log

Severity Medium
Remote Yes
Type Insufficient validation
An issue has been found in PowerDNS Authoritative Server and PowerDNS Recursor allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures. A missing check of the TSIG time and fudge values in AXFRRetriever, leading to a possible replay attack.
Group Package Affected Fixed Severity Status Ticket
AVG-148 powerdns-recursor 4.0.3-7 4.0.4-1 Medium Fixed
AVG-147 powerdns 4.0.1-7 4.0.2-1 Medium Fixed
Date Advisory Group Package Severity Type
19 Jan 2017 ASA-201701-30 AVG-148 powerdns-recursor Medium multiple issues
19 Jan 2017 ASA-201701-29 AVG-147 powerdns Medium multiple issues
PowerDNS Authoritative Server up to and including 3.4.10 and 4.0.1 are affected. PowerDNS Recursor from 4.0.0 up to and including 4.0.3 are affected.