Known vulnerabilities in pdns-recursor - page 2

Software: pdns-recursor
Software CPE: cpe:2.3:o:fedoraproject:pdns-recursor:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 40
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting pdns-recursor pdns-recursor is affected by 40 known vulnerabilities: 1 high, 26 medium, 13 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111731 - NULL Pointer Dereference
CVE-2017-15120
CWE-476 Medium
No
No
4.1.3-2.el7, 4.1.3-2.fc27 21.06.2025 SB2018072724
SB2018052612
SB2018052613
#VU16147 - Out-of-bounds read
CVE-2018-16855
CWE-125 Low
No
No
4.1.8-1.el7, 4.1.8-1.fc28, 4.1.8-1.fc29 28.11.2018 SB2018112805
SB2018112806
SB2018121025
and 6 more
#VU15962 - Improper input validation
CVE-2018-14644
CWE-20 Low
No
No
4.1.7-1.el7, 4.1.7-1.fc28, 4.1.7-1.fc29, 4.1.8-1.el7, 4.1.8-1.fc28, 4.1.8-1.fc29 19.11.2018 SB2018111911
SB2018111912
SB2018121025
and 11 more
#VU15961 - Improper input validation
CVE-2018-14626
CWE-20 Low
No
No
4.1.7-1.el7, 4.1.7-1.fc28, 4.1.7-1.fc29, 4.1.8-1.el7, 4.1.8-1.fc28, 4.1.8-1.fc29 19.11.2018 SB2018111208
SB2018111911
SB2018111912
and 19 more
#VU15960 - Missing release of memory after effective lifetime
CVE-2018-10851
CWE-401 Low
No
No
4.1.7-1.el7, 4.1.7-1.fc28, 4.1.7-1.fc29, 4.1.8-1.el7, 4.1.8-1.fc28, 4.1.8-1.fc29 12.11.2018 SB2018111208
SB2018111911
SB2018111912
and 20 more
#VU32138 - Integer overflow
CVE-2016-2120
CWE-190 Medium
No
No
3.7.4-1.el6, 3.7.4-1.el7, 4.0.4-1.fc24, 4.0.4-1.fc25 01.11.2018 SB2018110115
SB2017040319
SB2017011937
and 7 more
#VU111726 - Memory corruption
CVE-2009-4009
CWE-119 High
No
No
3.1.7.2-1.el5 10.10.2018 SB2018101031
SB2014122205
SB2010010601
#VU111727 - Improper input validation
CVE-2009-4010
CWE-20 Medium
No
No
3.1.7.2-1.el5 10.10.2018 SB2018101031
SB2014122205
SB2010010601
#VU32136 - Resource exhaustion
CVE-2016-7068
CWE-400 Medium
No
No
3.7.4-1.el6, 3.7.4-1.el7, 4.0.4-1.fc24, 4.0.4-1.fc25 11.09.2018 SB2018091113
SB2017040320
SB2017040321
and 9 more
#VU32137 - Improper input validation
CVE-2016-7073
CWE-20 Medium
No
No
3.7.4-1.el6, 3.7.4-1.el7, 4.0.4-1.fc24, 4.0.4-1.fc25 11.09.2018 SB2018091114
SB2017040323
SB2017040324
and 9 more
#VU32140 - Improper input validation
CVE-2016-7074
CWE-20 Medium
No
No
3.7.4-1.el6, 3.7.4-1.el7, 4.0.4-1.fc24, 4.0.4-1.fc25 11.09.2018 SB2018091115
SB2017040325
SB2017040326
and 9 more
#VU32139 - Resource exhaustion
CVE-2016-7072
CWE-400 Medium
No
No
3.7.4-1.el6, 3.7.4-1.el7, 4.0.4-1.fc24, 4.0.4-1.fc25 10.09.2018 SB2018091009
SB2017040322
SB2017011937
and 7 more
#VU33493 - Improper input validation
CVE-2018-1000003
CWE-20 Low
No
No
4.1.3-2.el7, 4.1.3-2.fc27 22.01.2018 SB2018012710
SB2018052612
SB2018052613
#VU9441 - Missing release of memory after effective lifetime
CVE-2017-15094
CWE-401 Medium
No
No
4.0.7-1.fc25, 4.0.7-1.fc26, 4.0.7-1.fc27, 4.1.3-2.el7, 4.1.3-2.fc27 29.11.2017 SB2017112906
SB2017112907
SB2017121529
and 5 more
#VU9440 - Improper Access Control
CVE-2017-15093
CWE-284 Low
No
No
4.0.7-1.fc25, 4.0.7-1.fc26, 4.0.7-1.fc27, 4.1.3-2.el7, 4.1.3-2.fc27 29.11.2017 SB2017112906
SB2017112907
SB2017121528
and 5 more
#VU9439 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-15092
CWE-79 Low
No
No
4.0.7-1.fc25, 4.0.7-1.fc26, 4.0.7-1.fc27, 4.1.3-2.el7, 4.1.3-2.fc27 29.11.2017 SB2017112906
SB2017112907
SB2017121534
and 5 more
#VU9437 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2017-15090
CWE-300 Low
No
No
4.0.7-1.fc25, 4.0.7-1.fc26, 4.0.7-1.fc27, 4.1.3-2.el7, 4.1.3-2.fc27 29.11.2017 SB2017112906
SB2017112907
SB2017121531
and 5 more
#VU111724 - Resource Management Errors
CVE-2015-1868
CWE-399 Medium
No
No
3.6.3-1.el5, 3.7.2-1.el6, 3.7.2-1.el7, 3.7.2-1.fc21, 3.7.2-1.fc22 28.12.2016 SB2016122823
SB2015042314
SB2015042702
and 7 more
#VU41312 - Improper input validation
CVE-2014-3614
CWE-20 Medium
No
No
3.6.1-1.el5, 3.6.1-1.el6, 3.6.1-1.el7, 3.6.1-1.fc21 19.09.2014 SB2014091901
SB2014091004
SB2014091005
and 2 more
#VU44267 - Improper input validation
CVE-2012-1193
CWE-20 Medium
No
No
3.5-1.el5, 3.5-1.el6 18.02.2012 SB2012021809
SB2013041501
SB2013041502
and 1 more


Showing elements 21 - 40 out of 40