CVE search results

1 – 10 of 42 results

Detailed view

Sort by:

CVE-2025-30195

Medium priority

Needs evaluation

An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service. The remedy is:...

1 affected package

pdns-recursor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns-recursor	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2025-30192

Medium priority

Needs evaluation

An attacker spoofing answers to ECS enabled requests sent out by the Recursor has a chance of success higher than non-ECS enabled queries. The updated version include various mitigations against spoofing attempts of ECS enabled...

1 affected package

pdns-recursor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns-recursor	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2024-25590

Medium priority

Needs evaluation

An attacker can publish a zone containing specific Resource Record Sets. Repeatedly processing and caching results for these sets can lead to a denial of service.

1 affected package

pdns-recursor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns-recursor	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2024-25583

Medium priority

Needs evaluation

A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is...

1 affected package

pdns-recursor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns-recursor	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2023-50868

Medium priority

Some fixes available 23 of 44

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random...

7 affected packages

bind9, isc-dhcp, unbound, pdns-recursor, dnsmasq...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
bind9	Fixed	Fixed	Fixed	Fixed
isc-dhcp	Needs evaluation	Not affected	Not affected	Needs evaluation
unbound	Fixed	Fixed	Fixed	Needs evaluation
pdns-recursor	Not affected	Needs evaluation	Needs evaluation	Needs evaluation
dnsmasq	Fixed	Fixed	Fixed	Fixed
knot-resolver	Not affected	Needs evaluation	Needs evaluation	Needs evaluation
bind9-libs	Not in release	Needs evaluation	Needs evaluation	Not in release

CVE-2023-50387

Medium priority

Some fixes available 23 of 43

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the “KeyTrap” issue. One of...

7 affected packages

bind9, isc-dhcp, unbound, pdns-recursor, dnsmasq...

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
bind9	Fixed	Fixed	Fixed	Fixed
isc-dhcp	Needs evaluation	Not affected	Not affected	Needs evaluation
unbound	Fixed	Fixed	Fixed	Needs evaluation
pdns-recursor	Not affected	Needs evaluation	Needs evaluation	Needs evaluation
dnsmasq	Fixed	Fixed	Fixed	Fixed
knot-resolver	Not affected	Needs evaluation	Needs evaluation	Needs evaluation
bind9-libs	Not in release	Needs evaluation	Needs evaluation	Not in release

CVE-2023-26437

Medium priority

Needs evaluation

Denial of service vulnerability in PowerDNS Recursor allows authoritative servers to be marked unavailable.This issue affects Recursor: through 4.6.5, through 4.7.4 , through 4.8.3.

1 affected package

pdns-recursor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns-recursor	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2023-22617

Medium priority

Needs evaluation

A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode. This is fixed in 4.8.1.

1 affected package

pdns-recursor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns-recursor	Not affected	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2022-37428

Medium priority

Needs evaluation

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer...

1 affected package

pdns-recursor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns-recursor	Not affected	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2022-27227

Medium priority

Some fixes available 6 of 12

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes...

2 affected packages

pdns, pdns-recursor

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns	Not affected	Fixed	Fixed	Fixed
pdns-recursor	Not affected	Fixed	Fixed	Fixed

Export to JSON

Results by page:

Search CVE reports