RE
Product
Recursor
60
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 22Medium 25Low 3
Watch
Add Recursor to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10030 | 8.8 | May 19 | An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0 Affected: 4.1.0 through 4.3.0 |
| CVE-2025-59023 | 8.2 | Feb 9 | Crafted delegations or IP fragments can poison cached delegations in Recursor Affected: 5.3.0 before 5.3.1; 5.2.0 before 5.2.6; 5.1.0 before 5.1.8 |
| CVE-2019-3806 | 8.1 | Jan 29 | An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination… Affected: 4.1.4 before 4.1.9 |
| CVE-2026-52688 | 7.5 | Jul 23 | RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation Affected: 5.2.0 before 5.2.12; 5.3.0 before 5.3.9; 5.4.0 before 5.4.4 |
| CVE-2026-33612 | 7.5 | Jun 25 | ZoneToCache can poison the cache Affected: 5.2.0 before 5.2.11; 5.3.0 before 5.3.8; 5.4.0 before 5.4.3 |
| CVE-2026-33260 | 7.5 | Apr 22 | Insufficient input validation of internal webserver Affected: 5.4.0 before 5.4.1; 5.3.0 before 5.3.6; 5.2.0 before 5.2.9 |
| CVE-2026-33258 | 7.5 | Apr 22 | Crafted zones can cause increased resource usage Affected: 5.4.0 before 5.4.1; 5.3.0 before 5.3.6; 5.2.0 before 5.2.9 |
| CVE-2026-33257 | 7.5 | Apr 22 | Insufficient input validation of internal webserver Affected: 5.4.0 before 5.4.1; 5.3.0 before 5.3.6; 5.2.0 before 5.2.9 |
| CVE-2026-33256 | 7.5 | Apr 22 | Unbounded memory allocation by internal web server Affected: 5.4.0 before 5.4.1; 5.3.0 before 5.3.6; 5.2.0 before 5.2.9 |
| CVE-2025-59030 | 7.5 | Dec 9 | Insufficient validation of incoming notifies over TCP can lead to a denial of service in Recursor Affected: 5.3.0 before 5.3.3; 5.2.0 before 5.2.7; 5.1.0 before 5.1.9 |
| CVE-2023-50868 | 7.5 | Feb 14 | The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for… Affected: before 4.8.5; 4.9.0 before 4.9.3; 5.0.0 before 5.0.2 |
| CVE-2023-50387 | 7.5 | Feb 14 | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more… Affected: 4.8.0 before 4.8.6; 4.9.0 before 4.9.3; 5.0.0 before 5.0.2 |
| CVE-2023-22617 | 7.5 | Jan 21 | A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName… Affected: 4.8.0 |
| CVE-2022-27227 | 7.5 | Mar 25 | In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1,… Affected: before 4.4.8; 4.5.0 before 4.5.8; 4.6.0 before 4.6.1 |
| CVE-2020-25829 | 7.5 | Oct 16 | An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5 Affected: before 4.1.18; 4.2.0 before 4.2.5; 4.3.0 before 4.3.5 |
| CVE-2020-10995 | 7.5 | May 19 | PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks Affected: 4.1.0 through 4.3.0 |
| CVE-2020-12244 | 7.5 | May 19 | An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated in… Affected: 4.1.0 through 4.3.0 |
| CVE-2018-16855 | 7.5 | Dec 3 | An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of… Affected: before 4.1.8 |
| CVE-2018-14626 | 7.5 | Nov 29 | PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerable to a packet cache pollution via crafted query that can… Affected: 4.0.0 through 4.1.4 |
| CVE-2018-10851 | 7.5 | Nov 29 | PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while… Affected: 3.2 through 4.1.4 |
| CVE-2016-7068 | 7.5 | Sep 11 | An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 3.7.4 and 4.0.4, allowing a remote, unauthenticated attacker to cause an abnormal CPU… Affected: before 3.7.4; 4.0.0 before 4.0.4 |
| CVE-2017-15120 | 7.5 | Jul 27 | An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer… Affected: before 4.0.8 |
Showing 22