Known vulnerabilities in PowerDNS Recursor - page 3

Software CPE: cpe:2.3:a:powerdns_com_b_v:powerdns_recursor:*:*:*:*:*:*:*:*
Total vulnerabilities: 63
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerDNS Recursor PowerDNS Recursor is affected by 63 known vulnerabilities: 1 high, 45 medium, 17 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111731 - NULL Pointer Dereference
CVE-2017-15120
CWE-476 Medium
No
No
4.0.8 21.06.2025 SB2018072724
SB2018052612
SB2018052613
#VU28143 - Out-of-bounds read
CVE-2020-10030
CWE-125 Low
No
No
4.1.16, 4.2.2, 4.3.1 20.05.2020 SB2020052032
SB2020052306
SB2020052307
and 5 more
#VU17348 - Permissions, Privileges, and Access Controls
CVE-2019-3807
CWE-264 Low
No
No
4.1.9 01.02.2019 SB2019020106
SB2019012427
SB2019020107
and 6 more
#VU17347 - Permissions, Privileges, and Access Controls
CVE-2019-3806
CWE-264 Low
No
No
4.1.9 01.02.2019 SB2019020106
SB2019012427
SB2019020605
and 4 more
#VU16147 - Out-of-bounds read
CVE-2018-16855
CWE-125 Low
No
No
4.1.8 28.11.2018 SB2018112805
SB2018112806
SB2018121025
and 6 more
#VU15962 - Improper input validation
CVE-2018-14644
CWE-20 Low
No
No
4.1.5 19.11.2018 SB2018111911
SB2018111912
SB2018121025
and 11 more
#VU15961 - Improper input validation
CVE-2018-14626
CWE-20 Low
No
No
4.1.5 19.11.2018 SB2018111208
SB2018111911
SB2018111912
and 19 more
#VU15960 - Missing release of memory after effective lifetime
CVE-2018-10851
CWE-401 Low
No
No
4.1.5 12.11.2018 SB2018111208
SB2018111911
SB2018111912
and 20 more
#VU111726 - Memory corruption
CVE-2009-4009
CWE-119 High
No
No
3.1.7.2 10.10.2018 SB2018101031
SB2014122205
SB2010010601
#VU111727 - Improper input validation
CVE-2009-4010
CWE-20 Medium
No
No
3.1.7.2 10.10.2018 SB2018101031
SB2014122205
SB2010010601
#VU9441 - Missing release of memory after effective lifetime
CVE-2017-15094
CWE-401 Medium
No
No
- 29.11.2017 SB2017112906
SB2017112907
SB2017121529
and 5 more
#VU9440 - Improper Access Control
CVE-2017-15093
CWE-284 Low
No
No
- 29.11.2017 SB2017112906
SB2017112907
SB2017121528
and 5 more
#VU9439 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-15092
CWE-79 Low
No
No
- 29.11.2017 SB2017112906
SB2017112907
SB2017121534
and 5 more
#VU9437 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2017-15090
CWE-300 Low
No
No
- 29.11.2017 SB2017112906
SB2017112907
SB2017121531
and 5 more
#VU111728 - Improper input validation
CVE-2008-3217
CWE-20 Medium
No
No
3.1.6 08.08.2017 SB2017080870
SB2008041801
#VU111729 - Improper input validation
CVE-2006-4252
CWE-20 Medium
No
No
3.1.4 20.07.2017 SB2017072046
#VU111730 - Improper input validation
CVE-2006-4251
CWE-20 Medium
No
No
3.1.4 20.07.2017 SB2017072046
#VU111724 - Resource Management Errors
CVE-2015-1868
CWE-399 Medium
No
No
3.3.2, 3.4.4, 3.6.3, 3.7.2 28.12.2016 SB2016122823
SB2015042314
SB2015042702
and 7 more
#VU111725 - Resource Management Errors
CVE-2014-8601
CWE-399 Medium
No
No
3.6.2 06.09.2016 SB2016090608
SB2014122205
#VU111723 - Improper input validation
CVE-2015-5470
CWE-20 Medium
No
No
3.4.5, 3.7.3 04.11.2015 SB2015110404


Showing elements 41 - 60 out of 63