Vulnerability index

Browse CVEs

77 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Authoritative HIGH 7.5
CVE-2016-5426EPSS 31%

PowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service (backend CPU consumption) via a long qnam…

Fix: after 3.4.9
Fix from $1,950 2016-09-21
Authoritative MEDIUM 5.0
CVE-2015-5311EPSS 67%

PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash)…

Patch available
Fix from $1,600 2015-11-17
Authoritative HIGH 7.8
CVE-2015-5470EPSS 11%

The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3 and 3.4.x…

Fix: after 3.6.3
Fix from $1,950 2015-11-02
Powerdns Recursor MEDIUM 5.0
CVE-2014-3614EPSS 6%

Unspecified vulnerability in PowerDNS Recursor (aka pdns_recursor) 3.6.x before 3.6.1 allows remote attackers to cause a denial of service (crash) vi…

Patch available
Fix from $1,600 2014-09-19
Powerdns Recursor MEDIUM 6.4
CVE-2012-1193EPSS 6%

The resolver in PowerDNS Recursor (aka pdns_recursor) 3.3 overwrites cached server names and TTL values in NS records during the processing of a resp…

No fix yet
Fix from $1,600 2012-02-17
Authoritative Server MEDIUM 5.0
CVE-2012-0206EPSS 5%

common_startup.cc in PowerDNS (aka pdns) Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial of servi…

Fix: after 2.9.22
Fix from $1,600 2012-02-17
Recursor HIGH 10.0
CVE-2009-4009EPSS 18%

Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary…

Fix: after 3.1.7.2
Fix from $1,950 2010-01-08
Recursor HIGH 7.5
CVE-2009-4010EPSS 10%

Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.

Fix: after 3.1.7.2
Fix from $1,950 2010-01-08
Authoritative Server MEDIUM 6.4
CVE-2008-3337EPSS 6%

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other …

Fix: after 2.9.21
Fix from $1,600 2008-08-08
Recursor MEDIUM 6.8
CVE-2008-3217

PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote …

Fix: after 3.1.5
Fix from $1,600 2008-07-18
Recursor MEDIUM 6.8
CVE-2008-1637

PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbers, which makes it easier for …

Fix: after 3.1.4
Fix from $1,600 2008-04-02
Recursor MEDIUM 5.0
CVE-2006-4252EPSS 6%

PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME reco…

Fix: after 3.1.3
Fix from $1,600 2006-11-14
Recursor HIGH 7.5
CVE-2006-4251EPSS 8%

Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prev…

Fix: after 3.1.3
Fix from $1,950 2006-11-14
Powerdns MEDIUM 5.0
CVE-2006-2069EPSS 6%

The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service (application crash) via malformed EDNS0 packets.

Patch available
Fix from $1,600 2006-04-27
Powerdns MEDIUM 5.0
CVE-2005-0038EPSS 6%

The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label l…

Fix: after 2.9.16
Fix from $1,600 2005-12-31
Powerdns MEDIUM 5.0
CVE-2005-2301

PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote attackers to cause a denial of …

Mitigation only
Fix from $1,600 2005-07-19
Powerdns MEDIUM 5.0
CVE-2005-0428

The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a random strea…

Patch available
Fix from $1,600 2005-05-02