Powerdns

Authoritative Server

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2022-27227

  • EPSS 0.11%
  • Published 25.03.2022 15:15:07
  • Last modified 21.11.2024 06:55:27

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfer...

7.5

CVE-2021-36754

  • EPSS 20.56%
  • Published 30.07.2021 14:15:18
  • Last modified 21.11.2024 06:14:01

PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exception.

4.3

CVE-2019-10203

  • EPSS 0.02%
  • Published 22.11.2019 13:15:11
  • Last modified 21.11.2024 04:18:38

PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS.

8.8

CVE-2019-3871

Exploit
  • EPSS 0.03%
  • Published 21.03.2019 21:29:00
  • Last modified 21.11.2024 04:42:45

A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of data coming from the user when building a HTTP request from a DNS query in the HTTP Connector of the Remote backend, allowing a re...

7.1

CVE-2016-6172

  • EPSS 0.01%
  • Published 26.09.2016 16:59:04
  • Last modified 12.04.2025 10:46:40

PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large (1) AXFR or (2) IXFR response.

5

CVE-2012-0206

  • EPSS 0.01%
  • Published 17.02.2012 21:55:00
  • Last modified 11.04.2025 00:51:21

common_startup.cc in PowerDNS (aka pdns) Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial of service (packet loop) via a crafted UDP DNS response.

6.4

CVE-2008-3337

  • EPSS 0.02%
  • Published 08.08.2008 19:41:00
  • Last modified 09.04.2025 00:30:58

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.