Known vulnerabilities in pdns-recursor (Alpine package)

Known vulnerabilities in pdns-recursor (Alpine package)

Vendor: Alpine Linux Development Team

Software: pdns-recursor (Alpine package)

Software CPE: cpe:2.3:o:alpine:pdns-recursor_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 19

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU47532 - Improper input validation CVE-2020-25829	CWE-20	Medium	No	No	-	13.10.2020	SB2020101312 SB2020101606 SB2020101711 and 5 more
#VU29577 - Improper Access Control CVE-2020-14196	CWE-284	Medium	No	No	4.3.2-r0	08.07.2020	SB2020070802 SB2020070803 SB2020071905 and 8 more
#VU28143 - Out-of-bounds read CVE-2020-10030	CWE-125	Low	No	No	4.1.16-r0	20.05.2020	SB2020052032 SB2020052306 SB2020052307 and 5 more
#VU28142 - Improper input validation CVE-2020-12244	CWE-20	Medium	No	No	4.1.16-r0	20.05.2020	SB2020052032 SB2020052101 SB2020052222 and 7 more
#VU28141 - Improper input validation CVE-2020-10995	CWE-20	Medium	No	No	4.1.16-r0	20.05.2020	SB2020052032 SB2020052101 SB2020052222 and 7 more
#VU17348 - Permissions, Privileges, and Access Controls CVE-2019-3807	CWE-264	Low	No	No	4.1.9-r0	01.02.2019	SB2019020106 SB2019012427 SB2019020107 and 6 more
#VU17347 - Permissions, Privileges, and Access Controls CVE-2019-3806	CWE-264	Low	No	No	4.1.9-r0	01.02.2019	SB2019020106 SB2019012427 SB2019020605 and 4 more
#VU16147 - Out-of-bounds read CVE-2018-16855	CWE-125	Low	No	No	4.1.8-r0	28.11.2018	SB2018112805 SB2018112806 SB2018121025 and 6 more
#VU15962 - Improper input validation CVE-2018-14644	CWE-20	Low	No	No	4.0.9-r0, 4.1.8-r0	19.11.2018	SB2018111911 SB2018111912 SB2018121025 and 11 more
#VU15961 - Improper input validation CVE-2018-14626	CWE-20	Low	No	No	4.0.9-r0, 4.1.8-r0	19.11.2018	SB2018111208 SB2018111911 SB2018111912 and 19 more
#VU15960 - Missing release of memory after effective lifetime CVE-2018-10851	CWE-401	Low	No	No	4.0.9-r0, 4.1.8-r0	12.11.2018	SB2018111208 SB2018111911 SB2018111912 and 20 more
#VU32136 - Resource exhaustion CVE-2016-7068	CWE-400	Medium	No	No	4.0.4-r0	11.09.2018	SB2018091113 SB2017040320 SB2017040321 and 9 more
#VU32137 - Improper input validation CVE-2016-7073	CWE-20	Medium	No	No	4.0.4-r0	11.09.2018	SB2018091114 SB2017040323 SB2017040324 and 9 more
#VU32140 - Improper input validation CVE-2016-7074	CWE-20	Medium	No	No	4.0.4-r0	11.09.2018	SB2018091115 SB2017040325 SB2017040326 and 9 more
#VU33493 - Improper input validation CVE-2018-1000003	CWE-20	Low	No	No	4.1.1-r0	22.01.2018	SB2018012710 SB2018052612 SB2018052613
#VU9441 - Missing release of memory after effective lifetime CVE-2017-15094	CWE-401	Medium	No	No	4.0.7-r0	29.11.2017	SB2017112906 SB2017112907 SB2017121529 and 5 more
#VU9440 - Improper Access Control CVE-2017-15093	CWE-284	Low	No	No	4.0.7-r0	29.11.2017	SB2017112906 SB2017112907 SB2017121528 and 5 more
#VU9439 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-15092	CWE-79	Low	No	No	4.0.7-r0	29.11.2017	SB2017112906 SB2017112907 SB2017121534 and 5 more
#VU9437 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2017-15090	CWE-300	Low	No	No	4.0.7-r0	29.11.2017	SB2017112906 SB2017112907 SB2017121531 and 5 more