Advisories · Technology
PowerDNS Authoritative.
Every CVE that names PowerDNS Authoritative among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Insufficient input validation of internal web server
- PowerDNS Authoritative
- Denial of service
- CVSS 4.8 Medium
Incorrect Behaviour of Views with TCP PROXY Requests
- PowerDNS Authoritative
- Broken access control
- CVSS 5.9 Medium
Concurrency and locking defects in GSS-TSIG
- PowerDNS Authoritative
- CWE-364
- CVSS 7.5 High
Insufficient Validation of Autoprimary SOA Queries
- PowerDNS Authoritative
- Denial of service
- CVSS 6.8 Medium
Insufficient Validation of Names During AXFR
- PowerDNS Authoritative
- Command injection
- CVSS 4.9 Medium
Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail
- PowerDNS Authoritative
- Code injection
- CVSS 6.5 Medium
Insufficient validation of HTTPS and SVCB records
- PowerDNS Authoritative
- Memory corruption
- CVSS 5.9 Medium
Possible file descriptor exhaustion in forward-dnsupdate
- PowerDNS Authoritative
- Denial of service
- CVSS 5.3 Medium
LDAP DN injection
- PowerDNS Authoritative
- Other injection
- CVSS 7.4 High
Incomplete domain name sanitization during
- PowerDNS Authoritative
- Code injection
- CVSS 5.3 Medium
Insufficient input validation of internal webserver
- PowerDNS Authoritative
- PowerDNS DNSdist
- Denial of service
- CVSS 5.3 Medium
Insufficient input validation of internal webserver
- PowerDNS Authoritative
- PowerDNS DNSdist
- Denial of service
-
Incorrect authorization in PowerDNS Authoritative
- PowerDNS Authoritative
- Broken access control