Powerdns Recursor vulnerabilities

5 vulnerabilities

Known vulnerabilities in Powerdns Recursor, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2014-3614debianpdns-recursor+1
EPSS score
6.02%
Unspecified vulnerability in PowerDNS Recursor (aka pdns_recursor) 3.6.x before 3.6.1 allows remote attackers to cause a denial of service (crash) via an unknown sequence of malformed packets.6.4CVE-2012-1193ubuntupdns-recursor+1
EPSS score
5.62%
The resolver in PowerDNS Recursor (aka pdns_recursor) 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack.6.1CVE-2017-15092debianpdns-recursor+3
EPSS score
2.27%
A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowing a remote attacker to inject HTML and Javascript code into the web interface, altering the content.5.9CVE-2017-15094debianpdns-recursor+3
EPSS score
3.30%
An issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4.0.0 up to and including 4.0.6 leading to a memory leak when parsing specially crafted DNSSEC ECDSA keys. These keys are only parsed when validation is enabled by setting dnssec to a value other than off or process-no-validate (default).5.3CVE-2017-15093debianpdns-recursor+3
EPSS score
0.83%
When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor's ACL by adding and removing netmasks, and to configure forward zones. It was discovered that the new netmask and IP addresses of forwarded zones were not sufficiently validated, allowing an authenticated user to inject new configuration directives into the Recursor's configuration.