CVE-2019-3806 - CVE House
Back to Database
Status published Medium CVE-2019-3806

An issue has been found in PowerDNS Recursor versions after...

Vulnerability Description

An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-3806

Credits & Attribution

No credits recorded in the NVD database.

References

More from Power DNS

View All →
CVE-2019-3807
An issue has been found in PowerDNS Recursor versions 4.1.x...
Low 3.7

Affected Vendor

Affected Software

pdns-recursor
Vulnerable Versions:
versions after 4.1.3 before 4.1.9

Timeline

Official Publish: January 29th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:H

Weaknesses (CWE)

CWE-358

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.