← Back

Recursor

recursor

Vendor: Powerdns • 50 CVEs

CVEs (50)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-1000003
1Powerdns
1Recursor
Nov 21, 2024
Jan 22, 2018
N/A· v4
3.7 LOW· v3
4.3 MEDIUM· v2
Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.
CVE-2015-5470
1Powerdns
2Authoritative
Recursor
May 6, 2026
Nov 2, 2015
N/A· v4
N/A· v3
7.8 HIGH· v2
The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service (CPU...Show more
The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3 and 3.4.x before 3.4.5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a long name that refers to itself. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1868.Show less
CVE-2015-1868
2Fedoraproject
Powerdns
3Authoritative
FedoraRecursor
May 6, 2026
May 18, 2015
N/A· v4
N/A· v3
7.8 HIGH· v2
The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to ca...Show more
The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.Show less
CVE-2014-8601
2Debian
Powerdns
2Debian Linux
Recursor
May 6, 2026
Dec 10, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service ("performance degradations") via a large or infinite number of referrals, as demonstrated by r...Show more
PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service ("performance degradations") via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezdns.it.Show less
CVE-2009-4010
1Powerdns
1Recursor
Apr 23, 2026
Jan 8, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.
CVE-2009-4009
1Powerdns
1Recursor
Apr 23, 2026
Jan 8, 2010
N/A· v4
N/A· v3
10.0 HIGH· v2
Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted packets.
CVE-2008-3217
1Powerdns
1Recursor
Apr 23, 2026
Jul 18, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related t...Show more
PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637.Show less
CVE-2008-1637
1Powerdns
1Recursor
Apr 23, 2026
Apr 2, 2008
N/A· v4
N/A· v3
6.8 MEDIUM· v2
PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to (a) algorithmic defi...Show more
PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to (a) algorithmic deficiencies in rand and random functions in external libraries, (b) use of a 32-bit seed value, and (c) choice of the time of day as the sole seeding information.Show less
CVE-2006-4252
1Powerdns
1Recursor
Apr 23, 2026
Nov 14, 2006
N/A· v4
N/A· v3
5.0 MEDIUM· v2
PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a zero TTL, which triggers an infinite loop.
CVE-2006-4251
1Powerdns
1Recursor
Apr 23, 2026
Nov 14, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length.