CVE-2019-10162 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2019-10162 Interim 1 39 2025-11-05T03:06:29Z current 2021-05-30T14:26:42Z 2025-11-05T03:06:29Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2019-10162 A vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.10, 4.0.8 allowing an authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. The issue is due to the fact that the Authoritative Server will exit when it runs into a parsing error while looking up the NS/A/AAAA records it is about to use for an outgoing notify. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EYLJ2BERQKZJZX4JVL4OARQ6323JOCJW/#EYLJ2BERQKZJZX4JVL4OARQ6323JOCJW E-Mail link for openSUSE-SU-2019:1904-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NTP5DP4CIWU5TQWIYIGBPMMRNJ32V4QZ/#NTP5DP4CIWU5TQWIYIGBPMMRNJ32V4QZ E-Mail link for openSUSE-SU-2019:1921-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE Package Hub 12 SP1 SUSE Package Hub 15 SUSE Package Hub 15 SP1 openSUSE Leap 15.0 openSUSE Leap 15.1 openSUSE Tumbleweed pdns pdns-4.1.11-20.1 pdns-4.1.2-bp150.2.9.1 pdns-4.1.2-lp150.3.13.1 pdns-4.1.8-bp151.3.3.1 pdns-4.1.8-lp151.2.3.1 pdns-4.5.1-1.5 pdns-backend-geoip-4.1.2-bp150.2.9.1 pdns-backend-geoip-4.1.2-lp150.3.13.1 pdns-backend-geoip-4.1.8-bp151.3.3.1 pdns-backend-geoip-4.1.8-lp151.2.3.1 pdns-backend-geoip-4.5.1-1.5 pdns-backend-godbc-4.1.11-20.1 pdns-backend-godbc-4.1.2-bp150.2.9.1 pdns-backend-godbc-4.1.2-lp150.3.13.1 pdns-backend-godbc-4.1.8-bp151.3.3.1 pdns-backend-godbc-4.1.8-lp151.2.3.1 pdns-backend-godbc-4.5.1-1.5 pdns-backend-ldap-4.1.11-20.1 pdns-backend-ldap-4.1.2-bp150.2.9.1 pdns-backend-ldap-4.1.2-lp150.3.13.1 pdns-backend-ldap-4.1.8-bp151.3.3.1 pdns-backend-ldap-4.1.8-lp151.2.3.1 pdns-backend-ldap-4.5.1-1.5 pdns-backend-lmdb-4.5.1-1.5 pdns-backend-lua-4.1.11-20.1 pdns-backend-lua-4.1.2-bp150.2.9.1 pdns-backend-lua-4.1.2-lp150.3.13.1 pdns-backend-lua-4.1.8-bp151.3.3.1 pdns-backend-lua-4.1.8-lp151.2.3.1 pdns-backend-lua-4.5.1-1.5 pdns-backend-mydns-4.1.11-20.1 pdns-backend-mydns-4.1.2-bp150.2.9.1 pdns-backend-mydns-4.1.2-lp150.3.13.1 pdns-backend-mydns-4.1.8-bp151.3.3.1 pdns-backend-mydns-4.1.8-lp151.2.3.1 pdns-backend-mysql pdns-backend-mysql-4.1.11-20.1 pdns-backend-mysql-4.1.2-bp150.2.9.1 pdns-backend-mysql-4.1.2-lp150.3.13.1 pdns-backend-mysql-4.1.8-bp151.3.3.1 pdns-backend-mysql-4.1.8-lp151.2.3.1 pdns-backend-mysql-4.5.1-1.5 pdns-backend-postgresql-4.1.11-20.1 pdns-backend-postgresql-4.1.2-bp150.2.9.1 pdns-backend-postgresql-4.1.2-lp150.3.13.1 pdns-backend-postgresql-4.1.8-bp151.3.3.1 pdns-backend-postgresql-4.1.8-lp151.2.3.1 pdns-backend-postgresql-4.5.1-1.5 pdns-backend-remote-4.1.11-20.1 pdns-backend-remote-4.1.2-bp150.2.9.1 pdns-backend-remote-4.1.2-lp150.3.13.1 pdns-backend-remote-4.1.8-bp151.3.3.1 pdns-backend-remote-4.1.8-lp151.2.3.1 pdns-backend-remote-4.5.1-1.5 pdns-backend-sqlite3-4.1.11-20.1 pdns-backend-sqlite3-4.1.2-bp150.2.9.1 pdns-backend-sqlite3-4.1.2-lp150.3.13.1 pdns-backend-sqlite3-4.1.8-bp151.3.3.1 pdns-backend-sqlite3-4.1.8-lp151.2.3.1 pdns-backend-sqlite3-4.5.1-1.5 pdns-4.1.11-20.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-geoip-4.1.8-lp151.2.3.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-godbc-4.1.11-20.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-ldap-4.1.11-20.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-lua-4.1.11-20.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-mydns-4.1.11-20.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-mysql-4.1.11-20.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-postgresql-4.1.11-20.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-remote-4.1.11-20.1 as a component of SUSE Package Hub 12 SP1 pdns-backend-sqlite3-4.1.11-20.1 as a component of SUSE Package Hub 12 SP1 pdns-4.1.2-bp150.2.9.1 as a component of SUSE Package Hub 15 pdns-backend-geoip-4.1.2-bp150.2.9.1 as a component of SUSE Package Hub 15 pdns-backend-godbc-4.1.2-bp150.2.9.1 as a component of SUSE Package Hub 15 pdns-backend-ldap-4.1.2-bp150.2.9.1 as a component of SUSE Package Hub 15 pdns-backend-lua-4.1.2-bp150.2.9.1 as a component of SUSE Package Hub 15 pdns-backend-mydns-4.1.2-bp150.2.9.1 as a component of SUSE Package Hub 15 pdns-backend-mysql-4.1.2-bp150.2.9.1 as a component of SUSE Package Hub 15 pdns-backend-postgresql-4.1.2-bp150.2.9.1 as a component of SUSE Package Hub 15 pdns-backend-remote-4.1.2-bp150.2.9.1 as a component of SUSE Package Hub 15 pdns-backend-sqlite3-4.1.2-bp150.2.9.1 as a component of SUSE Package Hub 15 pdns-4.1.8-bp151.3.3.1 as a component of SUSE Package Hub 15 SP1 pdns-backend-geoip-4.1.8-bp151.3.3.1 as a component of SUSE Package Hub 15 SP1 pdns-backend-godbc-4.1.8-bp151.3.3.1 as a component of SUSE Package Hub 15 SP1 pdns-backend-ldap-4.1.8-bp151.3.3.1 as a component of SUSE Package Hub 15 SP1 pdns-backend-lua-4.1.8-bp151.3.3.1 as a component of SUSE Package Hub 15 SP1 pdns-backend-mydns-4.1.8-bp151.3.3.1 as a component of SUSE Package Hub 15 SP1 pdns-backend-mysql-4.1.8-bp151.3.3.1 as a component of SUSE Package Hub 15 SP1 pdns-backend-postgresql-4.1.8-bp151.3.3.1 as a component of SUSE Package Hub 15 SP1 pdns-backend-remote-4.1.8-bp151.3.3.1 as a component of SUSE Package Hub 15 SP1 pdns-backend-sqlite3-4.1.8-bp151.3.3.1 as a component of SUSE Package Hub 15 SP1 pdns-4.1.2-lp150.3.13.1 as a component of openSUSE Leap 15.0 pdns-backend-geoip-4.1.2-lp150.3.13.1 as a component of openSUSE Leap 15.0 pdns-backend-godbc-4.1.2-lp150.3.13.1 as a component of openSUSE Leap 15.0 pdns-backend-ldap-4.1.2-lp150.3.13.1 as a component of openSUSE Leap 15.0 pdns-backend-lua-4.1.2-lp150.3.13.1 as a component of openSUSE Leap 15.0 pdns-backend-mydns-4.1.2-lp150.3.13.1 as a component of openSUSE Leap 15.0 pdns-backend-mysql-4.1.2-lp150.3.13.1 as a component of openSUSE Leap 15.0 pdns-backend-postgresql-4.1.2-lp150.3.13.1 as a component of openSUSE Leap 15.0 pdns-backend-remote-4.1.2-lp150.3.13.1 as a component of openSUSE Leap 15.0 pdns-backend-sqlite3-4.1.2-lp150.3.13.1 as a component of openSUSE Leap 15.0 pdns-4.1.8-lp151.2.3.1 as a component of openSUSE Leap 15.1 pdns-backend-geoip-4.1.8-lp151.2.3.1 as a component of openSUSE Leap 15.1 pdns-backend-godbc-4.1.8-lp151.2.3.1 as a component of openSUSE Leap 15.1 pdns-backend-ldap-4.1.8-lp151.2.3.1 as a component of openSUSE Leap 15.1 pdns-backend-lua-4.1.8-lp151.2.3.1 as a component of openSUSE Leap 15.1 pdns-backend-mydns-4.1.8-lp151.2.3.1 as a component of openSUSE Leap 15.1 pdns-backend-mysql-4.1.8-lp151.2.3.1 as a component of openSUSE Leap 15.1 pdns-backend-postgresql-4.1.8-lp151.2.3.1 as a component of openSUSE Leap 15.1 pdns-backend-remote-4.1.8-lp151.2.3.1 as a component of openSUSE Leap 15.1 pdns-backend-sqlite3-4.1.8-lp151.2.3.1 as a component of openSUSE Leap 15.1 pdns-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-geoip-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-godbc-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-ldap-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-lmdb-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-lua-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-mysql-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-postgresql-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-remote-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns-backend-sqlite3-4.5.1-1.5 as a component of openSUSE Tumbleweed pdns as a component of HPE Helion OpenStack 8 pdns-backend-mysql as a component of HPE Helion OpenStack 8 pdns as a component of SUSE OpenStack Cloud 8 pdns-backend-mysql as a component of SUSE OpenStack Cloud 8 pdns as a component of SUSE OpenStack Cloud 9 pdns-backend-mysql as a component of SUSE OpenStack Cloud 9 A vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.10, 4.0.8 allowing an authorized user to cause the server to exit by inserting a crafted record in a MASTER type zone under their control. The issue is due to the fact that the Authoritative Server will exit when it runs into a parsing error while looking up the NS/A/AAAA records it is about to use for an outgoing notify. CVE-2019-10162 SUSE Package Hub 12 SP1:pdns-4.1.11-20.1 SUSE Package Hub 12 SP1:pdns-backend-geoip-4.1.8-lp151.2.3.1 SUSE Package Hub 12 SP1:pdns-backend-godbc-4.1.11-20.1 SUSE Package Hub 12 SP1:pdns-backend-ldap-4.1.11-20.1 SUSE Package Hub 12 SP1:pdns-backend-lua-4.1.11-20.1 SUSE Package Hub 12 SP1:pdns-backend-mydns-4.1.11-20.1 SUSE Package Hub 12 SP1:pdns-backend-mysql-4.1.11-20.1 SUSE Package Hub 12 SP1:pdns-backend-postgresql-4.1.11-20.1 SUSE Package Hub 12 SP1:pdns-backend-remote-4.1.11-20.1 SUSE Package Hub 12 SP1:pdns-backend-sqlite3-4.1.11-20.1 SUSE Package Hub 15:pdns-4.1.2-bp150.2.9.1 SUSE Package Hub 15:pdns-backend-geoip-4.1.2-bp150.2.9.1 SUSE Package Hub 15:pdns-backend-godbc-4.1.2-bp150.2.9.1 SUSE Package Hub 15:pdns-backend-ldap-4.1.2-bp150.2.9.1 SUSE Package Hub 15:pdns-backend-lua-4.1.2-bp150.2.9.1 SUSE Package Hub 15:pdns-backend-mydns-4.1.2-bp150.2.9.1 SUSE Package Hub 15:pdns-backend-mysql-4.1.2-bp150.2.9.1 SUSE Package Hub 15:pdns-backend-postgresql-4.1.2-bp150.2.9.1 SUSE Package Hub 15:pdns-backend-remote-4.1.2-bp150.2.9.1 SUSE Package Hub 15:pdns-backend-sqlite3-4.1.2-bp150.2.9.1 SUSE Package Hub 15 SP1:pdns-4.1.8-bp151.3.3.1 SUSE Package Hub 15 SP1:pdns-backend-geoip-4.1.8-bp151.3.3.1 SUSE Package Hub 15 SP1:pdns-backend-godbc-4.1.8-bp151.3.3.1 SUSE Package Hub 15 SP1:pdns-backend-ldap-4.1.8-bp151.3.3.1 SUSE Package Hub 15 SP1:pdns-backend-lua-4.1.8-bp151.3.3.1 SUSE Package Hub 15 SP1:pdns-backend-mydns-4.1.8-bp151.3.3.1 SUSE Package Hub 15 SP1:pdns-backend-mysql-4.1.8-bp151.3.3.1 SUSE Package Hub 15 SP1:pdns-backend-postgresql-4.1.8-bp151.3.3.1 SUSE Package Hub 15 SP1:pdns-backend-remote-4.1.8-bp151.3.3.1 SUSE Package Hub 15 SP1:pdns-backend-sqlite3-4.1.8-bp151.3.3.1 openSUSE Leap 15.0:pdns-4.1.2-lp150.3.13.1 openSUSE Leap 15.0:pdns-backend-geoip-4.1.2-lp150.3.13.1 openSUSE Leap 15.0:pdns-backend-godbc-4.1.2-lp150.3.13.1 openSUSE Leap 15.0:pdns-backend-ldap-4.1.2-lp150.3.13.1 openSUSE Leap 15.0:pdns-backend-lua-4.1.2-lp150.3.13.1 openSUSE Leap 15.0:pdns-backend-mydns-4.1.2-lp150.3.13.1 openSUSE Leap 15.0:pdns-backend-mysql-4.1.2-lp150.3.13.1 openSUSE Leap 15.0:pdns-backend-postgresql-4.1.2-lp150.3.13.1 openSUSE Leap 15.0:pdns-backend-remote-4.1.2-lp150.3.13.1 openSUSE Leap 15.0:pdns-backend-sqlite3-4.1.2-lp150.3.13.1 openSUSE Leap 15.1:pdns-4.1.8-lp151.2.3.1 openSUSE Leap 15.1:pdns-backend-geoip-4.1.8-lp151.2.3.1 openSUSE Leap 15.1:pdns-backend-godbc-4.1.8-lp151.2.3.1 openSUSE Leap 15.1:pdns-backend-ldap-4.1.8-lp151.2.3.1 openSUSE Leap 15.1:pdns-backend-lua-4.1.8-lp151.2.3.1 openSUSE Leap 15.1:pdns-backend-mydns-4.1.8-lp151.2.3.1 openSUSE Leap 15.1:pdns-backend-mysql-4.1.8-lp151.2.3.1 openSUSE Leap 15.1:pdns-backend-postgresql-4.1.8-lp151.2.3.1 openSUSE Leap 15.1:pdns-backend-remote-4.1.8-lp151.2.3.1 openSUSE Leap 15.1:pdns-backend-sqlite3-4.1.8-lp151.2.3.1 openSUSE Tumbleweed:pdns-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-geoip-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-godbc-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-ldap-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-lmdb-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-lua-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-mysql-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-postgresql-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-remote-4.5.1-1.5 openSUSE Tumbleweed:pdns-backend-sqlite3-4.5.1-1.5 HPE Helion OpenStack 8:pdns HPE Helion OpenStack 8:pdns-backend-mysql SUSE OpenStack Cloud 8:pdns SUSE OpenStack Cloud 8:pdns-backend-mysql SUSE OpenStack Cloud 9:pdns SUSE OpenStack Cloud 9:pdns-backend-mysql low 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L