PowerDNS Recursor < 4.1.17, 4.2.0 < 4.2.3, 4.3.0 < 4.3.2 Access Restriction Bypass Vulnerability

PowerDNS Recursor is prone to an access restriction bypass vulnerability.

An issue has been found in PowerDNS Recursor where the ACL applied to the internal web server via webserver-allow-from is not properly enforced, allowing a remote attacker to send HTTP queries to the internal web server, bypassing the restriction. In the default configuration the API webserver is not enabled. Only installations using a non-default value for webserver and webserver-address are affected.

PowerDNS Recursor 4.1.16 and prior, 4.2.0 - 4.2.2 and 4.3.0 - 4.3.1.

Checks if a vulnerable version is present on the target host.

Update to version 4.1.17, 4.2.3, 4.3.2 or later.