Advisories · Technology
PowerDNS Recursor.
Every CVE that names PowerDNS Recursor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation
- PowerDNS Recursor
- Weak cryptography or TLS
- CWE-345
- CVSS 3.7 Low
Wildcard CNAME proof validation bypass
- PowerDNS Recursor
- Weak cryptography or TLS
- CVSS 3.7 Low
Prefetch Feature Allows Persistent Ghost Domain Cache Poisoning Attack
- PowerDNS Recursor
- CVSS 5.3 Medium
Reject more queries with invalid header values
- PowerDNS Recursor
- CWE-20
- CVSS 5.9 Medium
Spoofed answers can mark an authoritative non-EDNS capable
- PowerDNS Recursor
- Authentication bypass
- CVSS 5.3 Medium
ZONEMD validation can be bypassed
- PowerDNS Recursor
- CWE-20
- CVSS 5.9 Medium
Missing input validation for catalog zones
- PowerDNS Recursor
- CWE-20
- CVSS 5.9 Medium
Insufficient input validation in ZoneToCache
- PowerDNS Recursor
- CWE-20
- CVSS 5.3 Medium
Information about ECS zero scoped answers might leak to clients that use a specific ECS
- PowerDNS Recursor
- CWE-524
- CVSS 7.5 High
ZoneToCache can poison the cache
- PowerDNS Recursor
- CWE-349
- CVSS 5.9 Medium
Insufficient validation of cookie reply
- PowerDNS Recursor
- Memory corruption
- CVSS 5.9 Medium
Null pointer accces in aggressive NSEC(3) cache
- PowerDNS Recursor
- CWE-353
- CVSS 5.3 Medium
Insufficient input validation of internal webserver
- PowerDNS Authoritative
- PowerDNS DNSdist
- Denial of service
- CVSS 5.0 Medium
Concurrent modification of RPZ data can lead to denial of servce
- PowerDNS Recursor
- Memory corruption
- CVSS 5.3 Medium
Crafted zones can cause increased resource usage
- PowerDNS Recursor
- Denial of service
- CVSS 5.3 Medium
Insufficient input validation of internal webserver
- PowerDNS Authoritative
- PowerDNS DNSdist
- Denial of service
- CVSS 5.3 Medium
Unbounded memory allocation by internal web server
- PowerDNS Recursor
- Denial of service
- CVSS 4.4 Medium
Insufficient validation of zonemd record
- PowerDNS Recursor
- Memory corruption
- CVSS 4.4 Medium
Null pointer dereference in RPZ transfer
- PowerDNS Recursor
- Memory corruption
- CVSS 6.5 Medium
Crafted delegations or IP fragments can poison cached delegations in Recursor
- PowerDNS Recursor
- CVSS 8.2 High
Crafted delegations or IP fragments can poison cached delegations in Recursor
- PowerDNS Recursor
- CVSS 5.3 Medium
Crafted zones can lead to increased incoming network traffic
- PowerDNS Recursor
- CVSS 5.3 Medium
Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor
- PowerDNS Recursor
- Denial of service
- CVSS 5.3 Medium
Internal logic flaw in cache management can lead to a denial of service in PowerDNS Recursor
- PowerDNS Recursor
- Denial of service
- CVSS 7.5 High
Insufficient validation of incoming notifies over TCP can lead to a denial of service in Recursor
- PowerDNS Recursor
- Broken access control
- CVSS 7.5 High
A Recursor configured to send out ECS enabled queries can be sensitive to spoofing attempts
- PowerDNS Recursor
- CWE-345
- CVSS 7.5 High
A crafted zone can lead to an illegal memory access in the PowerDNS Recursor
- PowerDNS Recursor
- Memory corruption
- CVSS 7.5 High
Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor
- PowerDNS Recursor
- CWE-20
- CVSS 7.5 High
Crafted responses can lead to a denial of service in Recursor if recursive forwarding is configured
- PowerDNS Recursor
- CWE-20
- CVSS 3.4 Low
Deterred spoofing attempts can lead to authoritative servers being marked unavailable
- PowerDNS Recursor
- Denial of service
-
Memory leak in PowerDNS Recursor
- PowerDNS Recursor
- Denial of service
-
Improper input validation in PowerDNS Recursor
- PowerDNS Recursor
- CWE-20
-
Cross-site scripting in PowerDNS Recursor
- PowerDNS Recursor
- Cross-site scripting (XSS)