Known vulnerabilities in pdns-recursor
Vendor:
Fedoraproject
Software:
pdns-recursor
Software CPE:
cpe:2.3:o:fedoraproject:pdns-recursor:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
40
Public exploits:
2
Known exploited (KEV):
0
Breakdown by Severity Chart
5.4.6-2.el10_2
5.4.6-2.fc45
5.4.6-2.fc44
5.4.6-2.el10_3
5.4.5-2.fc44
5.4.5-2.el10_2
5.4.5-2.el10_3
5.2.13-1.fc43
5.4.3-1.el10_3
5.4.3-1.el10_2
5.4.3-1.fc44
5.2.11-1.fc43
5.2.8-1.fc42
5.2.8-1.fc43
5.4.0-1.fc44
4.3.5-1.el8
4.3.5-1.fc32
4.3.5-1.fc33
4.3.4-1.fc33
4.3.1-1.fc32
4.2.2-1.el8
4.2.2-1.fc31
4.1.16-1.el7
4.1.9-1.el7
4.1.9-1.fc29
4.1.9-1.fc28
4.1.8-1.fc29
4.1.8-1.fc28
4.1.8-1.el7
4.1.7-1.fc28
4.1.7-1.fc29
4.1.7-1.el7
4.1.3-2.el7
4.1.3-2.fc27
4.0.7-1.fc25
4.0.7-1.fc27
4.0.7-1.fc26
3.7.4-1.el6
3.7.4-1.el7
4.0.4-1.fc25
4.0.4-1.fc24
3.7.2-1.fc22
3.7.2-1.fc21
3.7.2-1.el7
3.7.2-1.el6
3.6.3-1.el5
3.6.1-1.fc21
3.6.1-1.el7
3.6.1-1.el6
3.6.1-1.el5
3.5-1.el5
3.5-1.el6
4.6.3-1.fc36
4.6.2-1.fc36
5.1.2-1.fc41
5.0.9-1.fc40
4.9.9-1.fc39
4.8.6-1.el8
4.8.6-1.el9
4.9.3-1.fc39
4.8.6-1.fc38
3.1.7.2-1.el5
4.8.4-1.el8
4.8.4-1.el9
4.8.4-1.fc38
4.8.4-1.fc37
Vulnerabilities (40)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU139170 - Insufficient Verification of Data Authenticity CVE-2026-52688 |
CWE-345 | Medium | 5.4.6-2.el10_2, 5.4.6-2.el10_3, 5.4.6-2.fc44, 5.4.6-2.fc45 | 22.07.2026 |
SB2026072289 SB2026072439 SB2026090475 and 3 more |
||
| #VU122485 - Resource exhaustion CVE-2026-0398 |
CWE-400 | Medium | 5.2.11-1.fc43, 5.4.3-1.el10_2, 5.4.3-1.el10_3, 5.4.3-1.fc44 | 09.02.2026 |
SB2026020963 SB20260213149 SB20260625279 and 3 more |
||
| #VU119298 - Improper input validation CVE-2025-59030 |
CWE-20 | Medium | 5.2.8-1.fc42, 5.2.8-1.fc43 | 08.12.2025 |
SB2025120857 SB20251210188 SB2026040358 and 1 more |
||
| #VU119296 - Resource Management Errors CVE-2025-59029 |
CWE-399 | Medium | 5.2.8-1.fc42, 5.2.8-1.fc43, 5.2.11-1.fc43, 5.4.3-1.el10_2, 5.4.3-1.el10_3, 5.4.3-1.fc44 | 08.12.2025 |
SB2025120857 SB2026040358 SB2026040359 and 4 more |
||
| #VU117537 - Insufficient Verification of Data Authenticity CVE-2025-59024 |
CWE-345 | Medium | 5.2.11-1.fc43, 5.4.3-1.el10_2, 5.4.3-1.el10_3, 5.4.3-1.fc44 | 22.10.2025 |
SB20251022166 SB2025103002 SB20260625279 and 3 more |
||
| #VU117536 - Insufficient Verification of Data Authenticity CVE-2025-59023 |
CWE-345 | Medium | 5.2.11-1.fc43, 5.4.3-1.el10_2, 5.4.3-1.el10_3, 5.4.3-1.fc44 | 22.10.2025 |
SB20251022166 SB2025103002 SB20260625279 and 3 more |
||
| #VU113094 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2025-30192 |
CWE-349 | Medium | 5.2.8-1.fc42 | 21.07.2025 |
SB2025072136 SB2026040359 |
||
| #VU98023 - Resource Management Errors CVE-2024-25590 |
CWE-399 | Medium | 4.9.9-1.fc39, 5.0.9-1.fc40, 5.1.2-1.fc41 | 03.10.2024 |
SB2024100350 SB2024100742 SB2024100743 and 2 more |
||
| #VU86378 - Resource exhaustion CVE-2023-50868 |
CWE-400 | Medium | 4.8.6-1.el8, 4.8.6-1.el9, 4.8.6-1.fc38, 4.9.3-1.fc39 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 143 more |
||
| #VU86377 - Resource exhaustion CVE-2023-50387 |
CWE-400 | Medium | 4.8.6-1.el8, 4.8.6-1.el9, 4.8.6-1.fc38, 4.9.3-1.fc39 | 13.02.2024 |
SB2024021325 SB2024021330 SB2024021329 and 145 more |
||
| #VU74176 - Insufficient Verification of Data Authenticity CVE-2023-26437 |
CWE-345 | Low | 4.8.4-1.el8, 4.8.4-1.el9, 4.8.4-1.fc37, 4.8.4-1.fc38 | 29.03.2023 |
SB2023032942 SB20230818191 SB20230818192 and 2 more |
||
| #VU66715 - Improper Handling of Exceptional Conditions CVE-2022-37428 |
CWE-755 | Medium | 4.6.3-1.fc36, 4.8.4-1.el8, 4.8.4-1.el9 | 23.08.2022 |
SB2022082312 SB20230818193 SB20230818194 and 1 more |
||
| #VU61631 - Improper input validation CVE-2022-27227 |
CWE-20 | Low | 4.6.2-1.fc36, 4.8.4-1.el8, 4.8.4-1.el9 | 26.03.2022 |
SB2022032603 SB2022041526 SB2022041527 and 14 more |
||
| #VU47532 - Improper input validation CVE-2020-25829 |
CWE-20 | Medium | 4.3.5-1.el8, 4.3.5-1.fc32 | 13.10.2020 |
SB2020101312 SB2020101606 SB2020101711 and 5 more |
||
| #VU29577 - Improper Access Control CVE-2020-14196 |
CWE-284 | Medium | 4.3.4-1.fc33, 4.3.5-1.el8 | 08.07.2020 |
SB2020070802 SB2020070803 SB2020071905 and 8 more |
||
| #VU28143 - Out-of-bounds read CVE-2020-10030 |
CWE-125 | Low | 4.1.16-1.el7, 4.2.2-1.el8, 4.2.2-1.fc31, 4.3.1-1.fc32 | 20.05.2020 |
SB2020052032 SB2020052306 SB2020052307 and 5 more |
||
| #VU28142 - Improper input validation CVE-2020-12244 |
CWE-20 | Medium | 4.1.16-1.el7, 4.2.2-1.el8, 4.2.2-1.fc31, 4.3.1-1.fc32 | 20.05.2020 |
SB2020052032 SB2020052101 SB2020052222 and 7 more |
||
| #VU28141 - Improper input validation CVE-2020-10995 |
CWE-20 | Medium | 4.1.16-1.el7, 4.2.2-1.el8, 4.2.2-1.fc31, 4.3.1-1.fc32 | 20.05.2020 |
SB2020052032 SB2020052101 SB2020052222 and 7 more |
||
| #VU17348 - Permissions, Privileges, and Access Controls CVE-2019-3807 |
CWE-264 | Low | 4.1.9-1.el7, 4.1.9-1.fc28, 4.1.9-1.fc29 | 01.02.2019 |
SB2019020106 SB2019012427 SB2019020107 and 6 more |
||
| #VU17347 - Permissions, Privileges, and Access Controls CVE-2019-3806 |
CWE-264 | Low | 4.1.9-1.el7, 4.1.9-1.fc28, 4.1.9-1.fc29 | 01.02.2019 |
SB2019020106 SB2019012427 SB2019020605 and 4 more |
Showing elements 1 - 20 out of 40