Forgot to make a MD list

diff --git a/docs/markdown/security/powerdns-advisory-2016-02.md b/docs/markdown/security/powerdns-advisory-2016-02.md
index c342993f94f50db40bc5411a3f0abb84ff2f2790..090b4a837ee4255ffc02e2b5efa3881651e4a699 100644 (file)
--- a/docs/markdown/security/powerdns-advisory-2016-02.md
+++ b/docs/markdown/security/powerdns-advisory-2016-02.md
@@ -1,16 +1,16 @@
 # PowerDNS Security Advisory 2016-02: Crafted queries can cause abnormal CPU usage
 
-CVE: CVE-2016-7068
-Date: December 15th 2016
-Credit: Florian Heinz and Martin Kluge
-Affects: PowerDNS Authoritative Server up to and including 3.4.10, 4.0.1, PowerDNS Recursor up to and including 3.7.3, 4.0.3
-Not affected: PowerDNS Authoritative Server 3.4.11, 4.0.2 and PowerDNS Recursor 3.7.4, 4.0.4
-Severity: Medium
-Impact: Degraded service or Denial of service
-Exploit: This issue can be triggered by sending specially crafted query packets
-Risk of system compromise: No
-Solution: Upgrade to a non-affected version
-Workaround: Run dnsdist with the rules provided below in front of potentially affected servers.
+ * CVE: CVE-2016-7068
+ * Date: December 15th 2016
+ * Credit: Florian Heinz and Martin Kluge
+ * Affects: PowerDNS Authoritative Server up to and including 3.4.10, 4.0.1, PowerDNS Recursor up to and including 3.7.3, 4.0.3
+ * Not affected: PowerDNS Authoritative Server 3.4.11, 4.0.2 and PowerDNS Recursor 3.7.4, 4.0.4
+ * Severity: Medium
+ * Impact: Degraded service or Denial of service
+ * Exploit: This issue can be triggered by sending specially crafted query packets
+ * Risk of system compromise: No
+ * Solution: Upgrade to a non-affected version
+ * Workaround: Run dnsdist with the rules provided below in front of potentially affected servers.
 
 An issue has been found in PowerDNS allowing a remote, unauthenticated attacker to cause an abnormal CPU usage load on the PowerDNS server by sending crafted DNS queries, which might result in a partial denial of service if the system becomes overloaded. This issue is based on the fact that the PowerDNS server parses all records present in a query regardless of whether they are needed or even legitimate. A specially crafted query containing a large number of records can be used to take advantage of that behaviour. This issue has been assigned CVE-2016-7068.
 

diff --git a/docs/markdown/security/powerdns-advisory-2016-03.md b/docs/markdown/security/powerdns-advisory-2016-03.md
index eb5dad9fb0f8ff88181a76e9c6e610e90e5662c0..a95772554f76bd1e22565f9d01c15e84f36230ff 100644 (file)
--- a/docs/markdown/security/powerdns-advisory-2016-03.md
+++ b/docs/markdown/security/powerdns-advisory-2016-03.md
@@ -1,16 +1,16 @@
 # PowerDNS Security Advisory 2016-03: Denial of service via the web server
 
-CVE: CVE-2016-7072
-Date: December 15th 2016
-Credit: Mongo
-Affects: PowerDNS Authoritative Server up to and including 3.4.10, 4.0.1
-Not affected: PowerDNS Authoritative Server 3.4.11, 4.0.2
-Severity: Medium
-Impact: Degraded service or Denial of service
-Exploit: This issue can be triggered by opening a large number of simultaneous connections to the web server
-Risk of system compromise: No
-Solution: Upgrade to a non-affected version
-Workaround: Disable the web server, or restrict access to it via a firewall.
+ * CVE: CVE-2016-7072
+ * Date: December 15th 2016
+ * Credit: Mongo
+ * Affects: PowerDNS Authoritative Server up to and including 3.4.10, 4.0.1
+ * Not affected: PowerDNS Authoritative Server 3.4.11, 4.0.2
+ * Severity: Medium
+ * Impact: Degraded service or Denial of service
+ * Exploit: This issue can be triggered by opening a large number of simultaneous connections to the web server
+ * Risk of system compromise: No
+ * Solution: Upgrade to a non-affected version
+ * Workaround: Disable the web server, or restrict access to it via a firewall.
 
 An issue has been found in PowerDNS Authoritative Server allowing a remote, unauthenticated attacker to cause a denial of service by opening a large number of TCP connections to the web server. If the web server runs out of file descriptors, it triggers an exception and terminates the whole PowerDNS process.
 While it's more complicated for an unauthorized attacker to make the web server run out of file descriptors since its connection will be closed just after being accepted, it might still be possible.

diff --git a/docs/markdown/security/powerdns-advisory-2016-04.md b/docs/markdown/security/powerdns-advisory-2016-04.md
index 26939fcd0666309694a2074275b3c7f73e9380af..0c971b23b924b7ad79d940c6b9b55c0c1c60c642 100644 (file)
--- a/docs/markdown/security/powerdns-advisory-2016-04.md
+++ b/docs/markdown/security/powerdns-advisory-2016-04.md
@@ -1,15 +1,15 @@
 # PowerDNS Security Advisory 2016-04: Insufficient validation of TSIG signatures
 
-CVE: CVE-2016-7073 CVE-2016-7074
-Date: December 15th 2016
-Credit: Mongo
-Affects: PowerDNS Authoritative Server up to and including 3.4.10, 4.0.1, PowerDNS Recursor from 4.0.0 and up to and including 4.0.3
-Not affected: PowerDNS Authoritative Server 3.4.11, 4.0.2, PowerDNS Recursor < 4.0.0, 4.0.4
-Severity: Medium
-Impact: Zone content alteration
-Exploit: This problem can be triggered by an attacker in position of man-in-the-middle
-Risk of system compromise: No
-Solution: Upgrade to a non-affected version
+ * CVE: CVE-2016-7073 CVE-2016-7074
+ * Date: December 15th 2016
+ * Credit: Mongo
+ * Affects: PowerDNS Authoritative Server up to and including 3.4.10, 4.0.1, PowerDNS Recursor from 4.0.0 and up to and including 4.0.3
+ * Not affected: PowerDNS Authoritative Server 3.4.11, 4.0.2, PowerDNS Recursor < 4.0.0, 4.0.4
+ * Severity: Medium
+ * Impact: Zone content alteration
+ * Exploit: This problem can be triggered by an attacker in position of man-in-the-middle
+ * Risk of system compromise: No
+ * Solution: Upgrade to a non-affected version
 
 Two issues have been found in PowerDNS Authoritative Server allowing an attacker in position of man-in-the-middle to alter the content of an AXFR because of insufficient validation of TSIG signatures.
 The first issue is a missing check of the TSIG time and fudge values in `AXFRRetriever`, leading to a possible replay attack. This issue has been assigned CVE-2016-7073.

diff --git a/docs/markdown/security/powerdns-advisory-2016-05.md b/docs/markdown/security/powerdns-advisory-2016-05.md
index 94686646f2cb2b55283162981b94fd02c84dab77..edc25477da4f9ef2eb9c5ab654e172976e5dda5b 100644 (file)
--- a/docs/markdown/security/powerdns-advisory-2016-05.md
+++ b/docs/markdown/security/powerdns-advisory-2016-05.md
@@ -1,15 +1,15 @@
 # PowerDNS Security Advisory 2016-05: Crafted zone record can cause a denial of service
 
-CVE: CVE-2016-2120
-Date: December 15th 2016
-Credit: Mathieu Lafon
-Affects: PowerDNS Authoritative Server up to and including 3.4.10, 4.0.1
-Not affected: PowerDNS Authoritative Server 3.4.11, 4.0.2
-Severity: Medium
-Impact: Denial of service
-Exploit: This issue can be triggered by inserting a specially crafted record in a zone
-Risk of system compromise: No
-Solution: Upgrade to a non-affected version
+ * CVE: CVE-2016-2120
+ * Date: December 15th 2016
+ * Credit: Mathieu Lafon
+ * Affects: PowerDNS Authoritative Server up to and including 3.4.10, 4.0.1
+ * Not affected: PowerDNS Authoritative Server 3.4.11, 4.0.2
+ * Severity: Medium
+ * Impact: Denial of service
+ * Exploit: This issue can be triggered by inserting a specially crafted record in a zone
+ * Risk of system compromise: No
+ * Solution: Upgrade to a non-affected version
 
 An issue has been found in PowerDNS Authoritative Server allowing an authorized user to crash the server by inserting a specially crafted record in a zone under their control then sending a DNS query for that record.
 The issue is due to an integer overflow when checking if the content of the record matches the expected size, allowing an attacker to cause a read past the buffer boundary. This issue has been assigned CVE-2016-2120.