Browse CVEs

HIGH 7.5 CVE-2016-5426EPSS 31% PowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service (backend CPU consumption) via a long qnam… Authoritative after 3.4.9 Fix from $1,9502016-09-21 MEDIUM 5.0 CVE-2015-5311EPSS 67% PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash)… Authoritative Patch available Fix from $1,6002015-11-17 HIGH 7.8 CVE-2015-5470EPSS 11% The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3 and 3.4.x… Authoritative after 3.6.3 Fix from $1,9502015-11-02 MEDIUM 5.0 CVE-2014-3614EPSS 6% Unspecified vulnerability in PowerDNS Recursor (aka pdns_recursor) 3.6.x before 3.6.1 allows remote attackers to cause a denial of service (crash) vi… Powerdns Recursor Patch available Fix from $1,6002014-09-19 MEDIUM 6.4 CVE-2012-1193EPSS 6% The resolver in PowerDNS Recursor (aka pdns_recursor) 3.3 overwrites cached server names and TTL values in NS records during the processing of a resp… Powerdns Recursor No fix yet Fix from $1,6002012-02-17 MEDIUM 5.0 CVE-2012-0206EPSS 5% common_startup.cc in PowerDNS (aka pdns) Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial of servi… Authoritative Server after 2.9.22 Fix from $1,6002012-02-17 HIGH 10.0 CVE-2009-4009EPSS 18% Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary… Recursor after 3.1.7.2 Fix from $1,9502010-01-08 HIGH 7.5 CVE-2009-4010EPSS 10% Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones. Recursor after 3.1.7.2 Fix from $1,9502010-01-08 MEDIUM 6.4 CVE-2008-3337EPSS 6% PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other … Authoritative Server after 2.9.21 Fix from $1,6002008-08-08 MEDIUM 6.8 CVE-2008-3217 PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote … Recursor after 3.1.5 Fix from $1,6002008-07-18 MEDIUM 6.8 CVE-2008-1637 PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbers, which makes it easier for … Recursor after 3.1.4 Fix from $1,6002008-04-02 MEDIUM 5.0 CVE-2006-4252EPSS 6% PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME reco… Recursor after 3.1.3 Fix from $1,6002006-11-14 HIGH 7.5 CVE-2006-4251EPSS 8% Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prev… Recursor after 3.1.3 Fix from $1,9502006-11-14 MEDIUM 5.0 CVE-2006-2069EPSS 6% The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service (application crash) via malformed EDNS0 packets. Powerdns Patch available Fix from $1,6002006-04-27 MEDIUM 5.0 CVE-2005-0038EPSS 6% The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label l… Powerdns after 2.9.16 Fix from $1,6002005-12-31 MEDIUM 5.0 CVE-2005-2301 PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote attackers to cause a denial of … Powerdns Mitigation only Fix from $1,6002005-07-19 MEDIUM 5.0 CVE-2005-0428 The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a random strea… Powerdns Patch available Fix from $1,6002005-05-02