Unscored severity · published Jan 8, 2010
CVE-2009-4009
Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted packets
–
CVSS
17.6%
EPSS
No
On KEV
Description
Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted packets.
Exploitation
Is it being used?
Exploit prediction (EPSS)17.6% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
Recursor · Powerdns
through 3.1.7.2; 2.0_rc1; 2.8; 2.9.15; 2.9.16; 2.9.17; +12 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4009
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4009
doc.powerdns.com
http://doc.powerdns.com/powerdns-advisory-2010-01.html
secunia.com
http://secunia.com/advisories/38004
Vendor Advisory
http://secunia.com/advisories/38068
securitytracker.com
http://securitytracker.com/id?1023403
www.securityfocus.com
http://www.securityfocus.com/archive/1/508743/100/0/threaded
Patch
http://www.securityfocus.com/bid/37650
More from Recursor
9.8
CVE-2019-3807
An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of responses received from authoritative servers with the AA flag not…
8.8
CVE-2020-10030
An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0
8.2
CVE-2025-59023
Crafted delegations or IP fragments can poison cached delegations in Recursor
8.1
CVE-2019-3806
An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination…
7.5
CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation