Known vulnerabilities in PowerDNS Authoritative

Software CPE: cpe:2.3:a:powerdns_com_b_v:powerdns_authoritative:*:*:*:*:*:*:*:*
Total vulnerabilities: 29
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerDNS Authoritative PowerDNS Authoritative is affected by 29 known vulnerabilities: 20 medium, 9 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141167 - Resource exhaustion
CVE-2026-52682
CWE-400 Medium
No
No
4.9.17, 5.0.7, 5.1.4 06.08.2026 SB20260806120
SB2026080902
SB2026080903
and 1 more
#VU135238 - Allocation of Resources Without Limits or Throttling
CVE-2026-42005
CWE-770 Medium
No
No
4.9.16, 5.0.6, 5.1.2 25.06.2026 SB2026062580
SB20260625152
SB20260625205
and 8 more
#VU131980 - Signal Handler Race Condition
CVE-2026-42002
CWE-364 Medium
No
No
4.9.15, 5.0.5 20.05.2026 SB2026052077
SB2026052101
SB2026052143
and 4 more
#VU131981 - Resource exhaustion
CVE-2026-42001
CWE-400 Medium
No
No
4.9.15, 5.0.5 20.05.2026 SB2026052077
SB2026052101
SB2026052143
and 4 more
#VU131982 - Command injection
CVE-2026-42000
CWE-77 Medium
No
No
4.9.15, 5.0.5 20.05.2026 SB2026052077
SB2026052101
SB2026052143
and 4 more
#VU131983 - Improper Access Control
CVE-2026-41999
CWE-284 Low
No
No
5.0.5 20.05.2026 SB2026052077
SB2026052143
SB2026052144
and 3 more
#VU131984 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-42396
CWE-94 Low
No
No
4.9.15, 5.0.5 20.05.2026 SB2026052077
SB2026052101
SB2026052143
and 4 more
#VU126866 - Integer overflow
CVE-2026-33611
CWE-190 Low
No
No
4.9.14, 5.0.4 22.04.2026 SB20260422221
SB2026042701
SB2026042702
and 6 more
#VU126867 - Resource exhaustion
CVE-2026-33610
CWE-400 Medium
No
No
4.9.14, 5.0.4 22.04.2026 SB20260422221
SB2026042701
SB2026042702
and 6 more
#VU126868 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2026-33609
CWE-90 Low
No
No
4.9.14, 5.0.4 22.04.2026 SB20260422221
SB2026042701
SB2026042702
and 6 more
#VU126869 - Improper Control of Generation of Code ('Code Injection')
CVE-2026-33608
CWE-94 Medium
No
No
4.9.14, 5.0.4 22.04.2026 SB20260422221
SB20260513115
#VU126846 - Allocation of Resources Without Limits or Throttling
CVE-2026-33257
CWE-770 Medium
No
No
4.9.14, 5.0.4 22.04.2026 SB20260422205
SB20260422221
SB2026042356
and 4 more
#VU126849 - Allocation of Resources Without Limits or Throttling
CVE-2026-33260
CWE-770 Medium
No
No
4.9.14, 5.0.4 22.04.2026 SB20260422205
SB20260422221
SB2026042356
and 4 more
#VU61631 - Improper input validation
CVE-2022-27227
CWE-20 Low
No
No
4.4.3, 4.5.4, 4.6.1 26.03.2022 SB2022032603
SB2022041526
SB2022041527
and 14 more
#VU55314 - Out-of-bounds read
CVE-2021-36754
CWE-125 Medium
No
No
4.5.1 26.07.2021 SB2021072615
SB2021072707
SB2021072633
#VU47126 - Double Free
CVE-2020-24698
CWE-415 Medium
No
No
4.4.0 28.09.2020 SB2020092804
#VU47125 - Improper input validation
CVE-2020-24697
CWE-20 Medium
No
No
4.4.0 28.09.2020 SB2020092804
#VU47124 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-24696
CWE-362 Medium
No
No
4.4.0 28.09.2020 SB2020092804
#VU47123 - Exposure of sensitive information to an unauthorized actor
CVE-2020-17482
CWE-200 Medium
No
No
4.1.14, 4.2.3, 4.3.1 28.09.2020 SB2020092803
SB2020092805
SB2020092806
and 7 more
#VU111732 - Improper input validation
CVE-2015-5230
CWE-20 Medium
No
No
3.4.6 15.01.2020 SB2020011531
SB2015090310
SB2015090311
and 2 more


Showing elements 1 - 20 out of 29