The Powerdns Project vulnerabilities

3 vulnerabilities

Known vulnerabilities in The Powerdns Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

Products

2
7.5CVE-2018-14626debianpdns+7
EPSS score
2.72%
PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerable to a packet cache pollution via crafted query that can lead to denial of service.7.5CVE-2018-10851debianpdns+7
EPSS score
6.04%
PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.8.8CVE-2019-3871debianpdns+8
EPSS score
12.63%
A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of data coming from the user when building a HTTP request from a DNS query in the HTTP Connector of the Remote backend, allowing a remote user to cause a denial of service by making the server connect to an invalid endpoint, or possibly information disclosure by making the server connect to an internal endpoint and somehow extracting meaningful information about the response