Known vulnerabilities in pdns-recursor (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:pdns-recursor_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 28
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting pdns-recursor (Debian package) pdns-recursor (Debian package) is affected by 28 known vulnerabilities: 24 medium, 4 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141167 - Resource exhaustion
CVE-2026-52682
CWE-400 Medium
No
No
5.2.13-0+deb13u1 06.08.2026 SB20260806120
SB2026080902
SB2026080903
and 1 more
#VU139170 - Insufficient Verification of Data Authenticity
CVE-2026-52688
CWE-345 Medium
No
No
5.2.12-0+deb13u1 22.07.2026 SB2026072289
SB2026072439
#VU139171 - Insufficient Verification of Data Authenticity
CVE-2026-52686
CWE-345 Low
No
No
5.2.12-0+deb13u1 22.07.2026 SB2026072289
SB2026072439
#VU135382 - Acceptance of Extraneous Untrusted Data With Trusted Data
CVE-2026-33612
CWE-349 Medium
No
No
5.2.11-0+deb13u1 25.06.2026 SB20260625205
SB2026062611
#VU135383 - Exposure of resource to wrong sphere
CVE-2026-40012
CWE-668 Medium
No
No
5.2.11-0+deb13u1 25.06.2026 SB20260625205
SB2026062611
#VU135384 - Insufficient Verification of Data Authenticity
CVE-2026-42390
CWE-345 Medium
No
No
5.2.11-0+deb13u1 25.06.2026 SB20260625205
SB2026062611
#VU135385 - Improper input validation
CVE-2026-42388
CWE-20 Medium
No
No
5.2.11-0+deb13u1 25.06.2026 SB20260625205
SB2026062611
#VU135386 - Improper input validation
CVE-2026-42387
CWE-20 Medium
No
No
5.2.11-0+deb13u1 25.06.2026 SB20260625205
SB2026062611
#VU135387 - Authentication Bypass by Spoofing
CVE-2026-52690
CWE-290 Medium
No
No
5.2.11-0+deb13u1 25.06.2026 SB20260625205
SB2026062611
#VU135238 - Allocation of Resources Without Limits or Throttling
CVE-2026-42005
CWE-770 Medium
No
No
5.2.11-0+deb13u1 25.06.2026 SB2026062580
SB20260625152
SB20260625205
and 8 more
#VU126846 - Allocation of Resources Without Limits or Throttling
CVE-2026-33257
CWE-770 Medium
No
No
5.2.9-0+deb13u1 22.04.2026 SB20260422205
SB20260422221
SB2026042356
and 4 more
#VU126847 - Allocation of Resources Without Limits or Throttling
CVE-2026-33258
CWE-770 Medium
No
No
5.2.9-0+deb13u1 22.04.2026 SB20260422205
SB20260513114
#VU126848 - Use After Free
CVE-2026-33259
CWE-416 Low
No
No
5.2.9-0+deb13u1 22.04.2026 SB20260422205
SB20260513114
#VU126849 - Allocation of Resources Without Limits or Throttling
CVE-2026-33260
CWE-770 Medium
No
No
5.2.9-0+deb13u1 22.04.2026 SB20260422205
SB20260422221
SB2026042356
and 4 more
#VU126850 - Missing Support for Integrity Check
CVE-2026-33261
CWE-353 Medium
No
No
5.2.9-0+deb13u1 22.04.2026 SB20260422205
SB20260513114
#VU126852 - NULL Pointer Dereference
CVE-2026-33601
CWE-476 Low
No
No
5.2.9-0+deb13u1 22.04.2026 SB20260422205
SB20260513114
#VU126853 - NULL Pointer Dereference
CVE-2026-33600
CWE-476 Low
No
No
5.2.9-0+deb13u1 22.04.2026 SB20260422205
SB20260513114
#VU122485 - Resource exhaustion
CVE-2026-0398
CWE-400 Medium
No
No
5.2.8-0+deb13u1 09.02.2026 SB2026020963
SB20260213149
SB20260625279
and 3 more
#VU122484 - Resource exhaustion
CVE-2026-24027
CWE-400 Medium
No
No
5.2.8-0+deb13u1 09.02.2026 SB2026020963
SB20260213149
#VU119298 - Improper input validation
CVE-2025-59030
CWE-20 Medium
No
No
5.2.7-0+deb13u1 08.12.2025 SB2025120857
SB20251210188
SB2026040358
and 1 more


Showing elements 1 - 20 out of 28