Known vulnerabilities in pdns-recursor - page 2
Vendor:
Fedoraproject
Software:
pdns-recursor
Software CPE:
cpe:2.3:o:fedoraproject:pdns-recursor:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
40
Public exploits:
2
Known exploited (KEV):
0
Breakdown by Severity Chart
5.4.6-2.el10_2
5.4.6-2.fc45
5.4.6-2.fc44
5.4.6-2.el10_3
5.4.5-2.fc44
5.4.5-2.el10_2
5.4.5-2.el10_3
5.2.13-1.fc43
5.4.3-1.el10_3
5.4.3-1.el10_2
5.4.3-1.fc44
5.2.11-1.fc43
5.2.8-1.fc42
5.2.8-1.fc43
5.4.0-1.fc44
4.3.5-1.el8
4.3.5-1.fc32
4.3.5-1.fc33
4.3.4-1.fc33
4.3.1-1.fc32
4.2.2-1.el8
4.2.2-1.fc31
4.1.16-1.el7
4.1.9-1.el7
4.1.9-1.fc29
4.1.9-1.fc28
4.1.8-1.fc29
4.1.8-1.fc28
4.1.8-1.el7
4.1.7-1.fc28
4.1.7-1.fc29
4.1.7-1.el7
4.1.3-2.el7
4.1.3-2.fc27
4.0.7-1.fc25
4.0.7-1.fc27
4.0.7-1.fc26
3.7.4-1.el6
3.7.4-1.el7
4.0.4-1.fc25
4.0.4-1.fc24
3.7.2-1.fc22
3.7.2-1.fc21
3.7.2-1.el7
3.7.2-1.el6
3.6.3-1.el5
3.6.1-1.fc21
3.6.1-1.el7
3.6.1-1.el6
3.6.1-1.el5
3.5-1.el5
3.5-1.el6
4.6.3-1.fc36
4.6.2-1.fc36
5.1.2-1.fc41
5.0.9-1.fc40
4.9.9-1.fc39
4.8.6-1.el8
4.8.6-1.el9
4.9.3-1.fc39
4.8.6-1.fc38
3.1.7.2-1.el5
4.8.4-1.el8
4.8.4-1.el9
4.8.4-1.fc38
4.8.4-1.fc37
Vulnerabilities (40)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU111731 - NULL Pointer Dereference CVE-2017-15120 |
CWE-476 | Medium | 4.1.3-2.el7, 4.1.3-2.fc27 | 21.06.2025 |
SB2018072724 SB2018052612 SB2018052613 |
||
| #VU16147 - Out-of-bounds read CVE-2018-16855 |
CWE-125 | Low | 4.1.8-1.el7, 4.1.8-1.fc28, 4.1.8-1.fc29 | 28.11.2018 |
SB2018112805 SB2018112806 SB2018121025 and 6 more |
||
| #VU15962 - Improper input validation CVE-2018-14644 |
CWE-20 | Low | 4.1.7-1.el7, 4.1.7-1.fc28, 4.1.7-1.fc29, 4.1.8-1.el7, 4.1.8-1.fc28, 4.1.8-1.fc29 | 19.11.2018 |
SB2018111911 SB2018111912 SB2018121025 and 11 more |
||
| #VU15961 - Improper input validation CVE-2018-14626 |
CWE-20 | Low | 4.1.7-1.el7, 4.1.7-1.fc28, 4.1.7-1.fc29, 4.1.8-1.el7, 4.1.8-1.fc28, 4.1.8-1.fc29 | 19.11.2018 |
SB2018111208 SB2018111911 SB2018111912 and 19 more |
||
| #VU15960 - Missing release of memory after effective lifetime CVE-2018-10851 |
CWE-401 | Low | 4.1.7-1.el7, 4.1.7-1.fc28, 4.1.7-1.fc29, 4.1.8-1.el7, 4.1.8-1.fc28, 4.1.8-1.fc29 | 12.11.2018 |
SB2018111208 SB2018111911 SB2018111912 and 20 more |
||
| #VU32138 - Integer overflow CVE-2016-2120 |
CWE-190 | Medium | 3.7.4-1.el6, 3.7.4-1.el7, 4.0.4-1.fc24, 4.0.4-1.fc25 | 01.11.2018 |
SB2018110115 SB2017040319 SB2017011937 and 7 more |
||
| #VU111726 - Memory corruption CVE-2009-4009 |
CWE-119 | High | 3.1.7.2-1.el5 | 10.10.2018 |
SB2018101031 SB2014122205 SB2010010601 |
||
| #VU111727 - Improper input validation CVE-2009-4010 |
CWE-20 | Medium | 3.1.7.2-1.el5 | 10.10.2018 |
SB2018101031 SB2014122205 SB2010010601 |
||
| #VU32136 - Resource exhaustion CVE-2016-7068 |
CWE-400 | Medium | 3.7.4-1.el6, 3.7.4-1.el7, 4.0.4-1.fc24, 4.0.4-1.fc25 | 11.09.2018 |
SB2018091113 SB2017040320 SB2017040321 and 9 more |
||
| #VU32137 - Improper input validation CVE-2016-7073 |
CWE-20 | Medium | 3.7.4-1.el6, 3.7.4-1.el7, 4.0.4-1.fc24, 4.0.4-1.fc25 | 11.09.2018 |
SB2018091114 SB2017040323 SB2017040324 and 9 more |
||
| #VU32140 - Improper input validation CVE-2016-7074 |
CWE-20 | Medium | 3.7.4-1.el6, 3.7.4-1.el7, 4.0.4-1.fc24, 4.0.4-1.fc25 | 11.09.2018 |
SB2018091115 SB2017040325 SB2017040326 and 9 more |
||
| #VU32139 - Resource exhaustion CVE-2016-7072 |
CWE-400 | Medium | 3.7.4-1.el6, 3.7.4-1.el7, 4.0.4-1.fc24, 4.0.4-1.fc25 | 10.09.2018 |
SB2018091009 SB2017040322 SB2017011937 and 7 more |
||
| #VU33493 - Improper input validation CVE-2018-1000003 |
CWE-20 | Low | 4.1.3-2.el7, 4.1.3-2.fc27 | 22.01.2018 |
SB2018012710 SB2018052612 SB2018052613 |
||
| #VU9441 - Missing release of memory after effective lifetime CVE-2017-15094 |
CWE-401 | Medium | 4.0.7-1.fc25, 4.0.7-1.fc26, 4.0.7-1.fc27, 4.1.3-2.el7, 4.1.3-2.fc27 | 29.11.2017 |
SB2017112906 SB2017112907 SB2017121529 and 5 more |
||
| #VU9440 - Improper Access Control CVE-2017-15093 |
CWE-284 | Low | 4.0.7-1.fc25, 4.0.7-1.fc26, 4.0.7-1.fc27, 4.1.3-2.el7, 4.1.3-2.fc27 | 29.11.2017 |
SB2017112906 SB2017112907 SB2017121528 and 5 more |
||
| #VU9439 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-15092 |
CWE-79 | Low | 4.0.7-1.fc25, 4.0.7-1.fc26, 4.0.7-1.fc27, 4.1.3-2.el7, 4.1.3-2.fc27 | 29.11.2017 |
SB2017112906 SB2017112907 SB2017121534 and 5 more |
||
| #VU9437 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2017-15090 |
CWE-300 | Low | 4.0.7-1.fc25, 4.0.7-1.fc26, 4.0.7-1.fc27, 4.1.3-2.el7, 4.1.3-2.fc27 | 29.11.2017 |
SB2017112906 SB2017112907 SB2017121531 and 5 more |
||
| #VU111724 - Resource Management Errors CVE-2015-1868 |
CWE-399 | Medium | 3.6.3-1.el5, 3.7.2-1.el6, 3.7.2-1.el7, 3.7.2-1.fc21, 3.7.2-1.fc22 | 28.12.2016 |
SB2016122823 SB2015042314 SB2015042702 and 7 more |
||
| #VU41312 - Improper input validation CVE-2014-3614 |
CWE-20 | Medium | 3.6.1-1.el5, 3.6.1-1.el6, 3.6.1-1.el7, 3.6.1-1.fc21 | 19.09.2014 |
SB2014091901 SB2014091004 SB2014091005 and 2 more |
||
| #VU44267 - Improper input validation CVE-2012-1193 |
CWE-20 | Medium | 3.5-1.el5, 3.5-1.el6 | 18.02.2012 |
SB2012021809 SB2013041501 SB2013041502 and 1 more |
Showing elements 21 - 40 out of 40