RE
Product
Recursor
60
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 22Medium 25Low 3
Watch
Add Recursor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1000003 | 3.7 | Jan 22 | Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via… Affected: 4.1.0 |
| CVE-2015-5470 | – | Nov 2 | The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before 3.7.3 and Authoritative (Auth) Server before 3.3.3 and 3.4.x before 3.4.5 allows remote… Affected: through 3.6.3; 3.7.1; 3.7.2 |
| CVE-2015-1868 | – | May 18 | The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x… Affected: 3.5; 3.5.1; 3.5.2; 3.5.3; 3.6.0; 3.6.1; +3 more |
| CVE-2014-8601 | – | Dec 10 | PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service ("performance degradations") via a large or infinite… Affected: through 3.6.1 |
| CVE-2009-4010 | – | Jan 8 | Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones Affected: through 3.1.7.2; 2.0_rc1; 2.8; 2.9.15; 2.9.16; 2.9.17; +12 more |
| CVE-2009-4009 | – | Jan 8 | Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted packets Affected: through 3.1.7.2; 2.0_rc1; 2.8; 2.9.15; 2.9.16; 2.9.17; +12 more |
| CVE-2008-3217 | – | Jul 18 | PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS… Affected: through 3.1.5; 3.0; 3.0.1; 3.1.1; 3.1.2; 3.1.3; +1 more |
| CVE-2008-1637 | – | Apr 2 | PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbers, which makes it easier for remote attackers to poison a… Affected: through 3.1.4 |
| CVE-2006-4252 | – | Nov 14 | PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a zero TTL, which… Affected: through 3.1.3; 2.0_rc1; 2.8; 2.9.15; 2.9.16; 2.9.17; +6 more |
| CVE-2006-4251 | – | Nov 14 | Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly… Affected: through 3.1.3; 2.0_rc1; 2.8; 2.9.15; 2.9.16; 2.9.17; +6 more |