CVE-2022-27227 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-27227 Interim 1 15 2025-11-05T01:35:27Z current 2022-04-03T02:02:20Z 2025-11-05T01:35:27Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-27227 In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GCAJV7QU7NXYUTY7OMBOV6LAES2X326R/ E-Mail link for openSUSE-SU-2022:0104-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/42XLX5GUN36HINIJX75C5RSFWMGRN4OW/ E-Mail link for openSUSE-SU-2022:0105-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE Package Hub 15 SP3 openSUSE Leap 15.3 openSUSE Tumbleweed pdns pdns-4.3.1-bp153.2.3.1 pdns-4.6.1-1.1 pdns-backend-geoip-4.3.1-bp153.2.3.1 pdns-backend-geoip-4.6.1-1.1 pdns-backend-godbc-4.3.1-bp153.2.3.1 pdns-backend-godbc-4.6.1-1.1 pdns-backend-ldap-4.3.1-bp153.2.3.1 pdns-backend-ldap-4.6.1-1.1 pdns-backend-lmdb-4.6.1-1.1 pdns-backend-lua-4.3.1-bp153.2.3.1 pdns-backend-lua-4.6.1-1.1 pdns-backend-mysql pdns-backend-mysql-4.3.1-bp153.2.3.1 pdns-backend-mysql-4.6.1-1.1 pdns-backend-postgresql-4.3.1-bp153.2.3.1 pdns-backend-postgresql-4.6.1-1.1 pdns-backend-remote-4.3.1-bp153.2.3.1 pdns-backend-remote-4.6.1-1.1 pdns-backend-sqlite3-4.3.1-bp153.2.3.1 pdns-backend-sqlite3-4.6.1-1.1 pdns-recursor-4.3.5-bp153.2.3.1 pdns-recursor-4.6.1-1.1 pdns-4.3.1-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 pdns-backend-geoip-4.3.1-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 pdns-backend-godbc-4.3.1-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 pdns-backend-ldap-4.3.1-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 pdns-backend-lua-4.3.1-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 pdns-backend-mysql-4.3.1-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 pdns-backend-postgresql-4.3.1-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 pdns-backend-remote-4.3.1-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 pdns-backend-sqlite3-4.3.1-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 pdns-recursor-4.3.5-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 pdns-4.3.1-bp153.2.3.1 as a component of openSUSE Leap 15.3 pdns-backend-geoip-4.3.1-bp153.2.3.1 as a component of openSUSE Leap 15.3 pdns-backend-godbc-4.3.1-bp153.2.3.1 as a component of openSUSE Leap 15.3 pdns-backend-ldap-4.3.1-bp153.2.3.1 as a component of openSUSE Leap 15.3 pdns-backend-lua-4.3.1-bp153.2.3.1 as a component of openSUSE Leap 15.3 pdns-backend-mysql-4.3.1-bp153.2.3.1 as a component of openSUSE Leap 15.3 pdns-backend-postgresql-4.3.1-bp153.2.3.1 as a component of openSUSE Leap 15.3 pdns-backend-remote-4.3.1-bp153.2.3.1 as a component of openSUSE Leap 15.3 pdns-backend-sqlite3-4.3.1-bp153.2.3.1 as a component of openSUSE Leap 15.3 pdns-recursor-4.3.5-bp153.2.3.1 as a component of openSUSE Leap 15.3 pdns-4.6.1-1.1 as a component of openSUSE Tumbleweed pdns-backend-geoip-4.6.1-1.1 as a component of openSUSE Tumbleweed pdns-backend-godbc-4.6.1-1.1 as a component of openSUSE Tumbleweed pdns-backend-ldap-4.6.1-1.1 as a component of openSUSE Tumbleweed pdns-backend-lmdb-4.6.1-1.1 as a component of openSUSE Tumbleweed pdns-backend-lua-4.6.1-1.1 as a component of openSUSE Tumbleweed pdns-backend-mysql-4.6.1-1.1 as a component of openSUSE Tumbleweed pdns-backend-postgresql-4.6.1-1.1 as a component of openSUSE Tumbleweed pdns-backend-remote-4.6.1-1.1 as a component of openSUSE Tumbleweed pdns-backend-sqlite3-4.6.1-1.1 as a component of openSUSE Tumbleweed pdns-recursor-4.6.1-1.1 as a component of openSUSE Tumbleweed pdns as a component of HPE Helion OpenStack 8 pdns-backend-mysql as a component of HPE Helion OpenStack 8 pdns as a component of SUSE OpenStack Cloud 8 pdns-backend-mysql as a component of SUSE OpenStack Cloud 8 pdns as a component of SUSE OpenStack Cloud 9 pdns-backend-mysql as a component of SUSE OpenStack Cloud 9 In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers. CVE-2022-27227 SUSE Package Hub 15 SP3:pdns-4.3.1-bp153.2.3.1 SUSE Package Hub 15 SP3:pdns-backend-geoip-4.3.1-bp153.2.3.1 SUSE Package Hub 15 SP3:pdns-backend-godbc-4.3.1-bp153.2.3.1 SUSE Package Hub 15 SP3:pdns-backend-ldap-4.3.1-bp153.2.3.1 SUSE Package Hub 15 SP3:pdns-backend-lua-4.3.1-bp153.2.3.1 SUSE Package Hub 15 SP3:pdns-backend-mysql-4.3.1-bp153.2.3.1 SUSE Package Hub 15 SP3:pdns-backend-postgresql-4.3.1-bp153.2.3.1 SUSE Package Hub 15 SP3:pdns-backend-remote-4.3.1-bp153.2.3.1 SUSE Package Hub 15 SP3:pdns-backend-sqlite3-4.3.1-bp153.2.3.1 SUSE Package Hub 15 SP3:pdns-recursor-4.3.5-bp153.2.3.1 openSUSE Leap 15.3:pdns-4.3.1-bp153.2.3.1 openSUSE Leap 15.3:pdns-backend-geoip-4.3.1-bp153.2.3.1 openSUSE Leap 15.3:pdns-backend-godbc-4.3.1-bp153.2.3.1 openSUSE Leap 15.3:pdns-backend-ldap-4.3.1-bp153.2.3.1 openSUSE Leap 15.3:pdns-backend-lua-4.3.1-bp153.2.3.1 openSUSE Leap 15.3:pdns-backend-mysql-4.3.1-bp153.2.3.1 openSUSE Leap 15.3:pdns-backend-postgresql-4.3.1-bp153.2.3.1 openSUSE Leap 15.3:pdns-backend-remote-4.3.1-bp153.2.3.1 openSUSE Leap 15.3:pdns-backend-sqlite3-4.3.1-bp153.2.3.1 openSUSE Leap 15.3:pdns-recursor-4.3.5-bp153.2.3.1 openSUSE Tumbleweed:pdns-4.6.1-1.1 openSUSE Tumbleweed:pdns-backend-geoip-4.6.1-1.1 openSUSE Tumbleweed:pdns-backend-godbc-4.6.1-1.1 openSUSE Tumbleweed:pdns-backend-ldap-4.6.1-1.1 openSUSE Tumbleweed:pdns-backend-lmdb-4.6.1-1.1 openSUSE Tumbleweed:pdns-backend-lua-4.6.1-1.1 openSUSE Tumbleweed:pdns-backend-mysql-4.6.1-1.1 openSUSE Tumbleweed:pdns-backend-postgresql-4.6.1-1.1 openSUSE Tumbleweed:pdns-backend-remote-4.6.1-1.1 openSUSE Tumbleweed:pdns-backend-sqlite3-4.6.1-1.1 openSUSE Tumbleweed:pdns-recursor-4.6.1-1.1 HPE Helion OpenStack 8:pdns HPE Helion OpenStack 8:pdns-backend-mysql SUSE OpenStack Cloud 8:pdns SUSE OpenStack Cloud 8:pdns-backend-mysql SUSE OpenStack Cloud 9:pdns SUSE OpenStack Cloud 9:pdns-backend-mysql important 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H