Known vulnerabilities in PowerDNS Recursor 4.1.4

Version: 4.1.4
Software CPE: cpe:2.3:a:powerdns_com_b_v:powerdns_recursor:*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting PowerDNS Recursor version 4.1.4 PowerDNS Recursor 4.1.4 is affected by 19 vulnerabilities: 10 medium, 9 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117537 - Insufficient Verification of Data Authenticity
CVE-2025-59024
CWE-345 Medium
No
No
5.1.8, 5.2.6, 5.3.1 22.10.2025 SB20251022166
SB2025103002
SB20260625279
and 3 more
#VU117536 - Insufficient Verification of Data Authenticity
CVE-2025-59023
CWE-345 Medium
No
No
5.1.8, 5.2.6, 5.3.1 22.10.2025 SB20251022166
SB2025103002
SB20260625279
and 3 more
#VU98023 - Resource Management Errors
CVE-2024-25590
CWE-399 Medium
No
No
4.9.9, 5.0.9, 5.1.2 03.10.2024 SB2024100350
SB2024100742
SB2024100743
and 2 more
#VU86378 - Resource exhaustion
CVE-2023-50868
CWE-400 Medium
Public exploit available
No
4.8.6, 4.9.3, 5.0.2 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 143 more
#VU86377 - Resource exhaustion
CVE-2023-50387
CWE-400 Medium
Public exploit available
No
4.8.6, 4.9.3, 5.0.2 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 145 more
#VU74176 - Insufficient Verification of Data Authenticity
CVE-2023-26437
CWE-345 Low
No
No
4.6.6, 4.7.5, 4.8.4 29.03.2023 SB2023032942
SB20230818191
SB20230818192
and 2 more
#VU66715 - Improper Handling of Exceptional Conditions
CVE-2022-37428
CWE-755 Medium
No
No
4.5.10, 4.6.3, 4.7.2 23.08.2022 SB2022082312
SB20230818193
SB20230818194
and 1 more
#VU61631 - Improper input validation
CVE-2022-27227
CWE-20 Low
No
No
4.4.8, 4.5.8, 4.6.1 26.03.2022 SB2022032603
SB2022041526
SB2022041527
and 14 more
#VU47532 - Improper input validation
CVE-2020-25829
CWE-20 Medium
No
No
4.1.18, 4.2.5, 4.3.5 13.10.2020 SB2020101312
SB2020101606
SB2020101711
and 5 more
#VU29577 - Improper Access Control
CVE-2020-14196
CWE-284 Medium
No
No
4.1.17, 4.2.3, 4.3.2 08.07.2020 SB2020070802
SB2020070803
SB2020071905
and 8 more
#VU28143 - Out-of-bounds read
CVE-2020-10030
CWE-125 Low
No
No
4.1.16, 4.2.2, 4.3.1 20.05.2020 SB2020052032
SB2020052306
SB2020052307
and 5 more
#VU28142 - Improper input validation
CVE-2020-12244
CWE-20 Medium
No
No
4.1.16, 4.2.2, 4.3.1 20.05.2020 SB2020052032
SB2020052101
SB2020052222
and 7 more
#VU28141 - Improper input validation
CVE-2020-10995
CWE-20 Medium
No
No
4.1.16, 4.2.2, 4.3.1 20.05.2020 SB2020052032
SB2020052101
SB2020052222
and 7 more
#VU17348 - Permissions, Privileges, and Access Controls
CVE-2019-3807
CWE-264 Low
No
No
4.1.9 01.02.2019 SB2019020106
SB2019012427
SB2019020107
and 6 more
#VU17347 - Permissions, Privileges, and Access Controls
CVE-2019-3806
CWE-264 Low
No
No
4.1.9 01.02.2019 SB2019020106
SB2019012427
SB2019020605
and 4 more
#VU16147 - Out-of-bounds read
CVE-2018-16855
CWE-125 Low
No
No
4.1.8 28.11.2018 SB2018112805
SB2018112806
SB2018121025
and 6 more
#VU15962 - Improper input validation
CVE-2018-14644
CWE-20 Low
No
No
4.1.5 19.11.2018 SB2018111911
SB2018111912
SB2018121025
and 11 more
#VU15961 - Improper input validation
CVE-2018-14626
CWE-20 Low
No
No
4.1.5 19.11.2018 SB2018111208
SB2018111911
SB2018111912
and 19 more
#VU15960 - Missing release of memory after effective lifetime
CVE-2018-10851
CWE-401 Low
No
No
4.1.5 12.11.2018 SB2018111208
SB2018111911
SB2018111912
and 20 more