Search for packages
| purl | pkg:deb/debian/pdns@4.9.7-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1bej-dqha-zqcm | PowerDNS before 2.9.18, when running with an LDAP backend, does not properly escape LDAP queries, which allows remote attackers to cause a denial of service (failure to answer ldap questions) and possibly conduct an LDAP injection attack. |
CVE-2005-2301
|
| VCID-1jzb-z2bs-vbeb | security update |
CVE-2016-7073
|
| VCID-2m6r-ztcg-gbgu | security update |
CVE-2016-7068
|
| VCID-37kj-yg3f-x7g3 | security update |
CVE-2016-5427
|
| VCID-4c2u-n7p5-nfg4 | PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerable to a packet cache pollution via crafted query that can lead to denial of service. |
CVE-2018-14626
|
| VCID-5efj-fcg6-cuc5 | security update |
CVE-2019-10162
|
| VCID-6nht-qd1p-qbbz | Two vulnerabilities have been discovered in PowerDNS, possibly leading to a Denial of Service and easing cache poisoning attacks. |
CVE-2008-3337
|
| VCID-6pjd-r9ca-rbgg | An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database corruption, if using the LMDB backend. |
CVE-2026-33611
|
| VCID-6uz8-kz5m-8ya9 | An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an invalid one, leading to the backend no longer able to run on the next restart, requiring manual operation to fix it. |
CVE-2026-33608
|
| VCID-7dc3-qdk8-k7b2 | In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers. |
CVE-2022-27227
|
| VCID-8fks-8s21-b7b4 | security update |
CVE-2019-10163
|
| VCID-bb3a-3ehq-8bhd | PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets. |
CVE-2015-5311
|
| VCID-ch2d-p2ru-23ex | PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service. |
CVE-2018-10851
|
| VCID-chzq-qej6-rkdq | An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default. |
CVE-2026-33257
|
| VCID-d13q-prqh-buge | The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself. |
CVE-2015-1868
|
| VCID-ez68-8ben-nuef | An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can trigger a race condition leading to a crash, or possibly arbitrary code execution, by sending crafted queries with a GSS-TSIG signature. |
CVE-2020-24696
|
| VCID-g4df-vh2e-abch | Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees. |
CVE-2026-33609
|
| VCID-gj88-me79-1qb3 | security update |
CVE-2016-5426
|
| VCID-gvr7-64sm-1kdv | PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exception. |
CVE-2021-36754
|
| VCID-j5zf-9dpp-qkh6 | Two vulnerabilities have been discovered in PowerDNS, possibly leading to a Denial of Service and easing cache poisoning attacks. |
CVE-2008-5277
|
| VCID-jrb1-cuhc-nqa1 | pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay. In the dnsreplay tool provided with PowerDNS Authoritative, replaying a specially crafted PCAP file can trigger a stack-based buffer overflow, leading to a crash and potentially arbitrary code execution. This buffer overflow only occurs when the -ecs-stamp option of dnsreplay is used. |
CVE-2018-1046
|
| VCID-keaf-6ca3-vkbc | An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, where some operations that have an impact on the state of the server are still allowed even though the API has been configured as read-only via the api-readonly keyword. This missing check allows an attacker with valid API credentials to flush the cache, trigger a zone transfer or send a NOTIFY. |
CVE-2017-15091
|
| VCID-kray-53q1-6qb4 | PowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not properly handle questions from clients that are denied recursion, which could cause a "blank out" of answers to those clients that are allowed to use recursion. |
CVE-2005-2302
|
| VCID-kzps-gj5k-8yh3 | PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a zero TTL, which triggers an infinite loop. |
CVE-2006-4252
|
| VCID-m7h2-vam9-1yhn | An information disclosure vulnerability in PowerDNS allow remote attackers to obtain sensitive information. |
CVE-2020-17482
|
| VCID-mnn7-6732-ykdm | security update |
CVE-2016-7072
|
| VCID-ncn3-gw35-tqd2 | A vulnerability in PowerDNS could lead to a temporary Denial of Service. |
CVE-2005-0428
|
| VCID-nwfa-n5f2-abe7 | security update |
CVE-2015-5470
|
| VCID-pfhu-1qdf-p7d5 | An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default. |
CVE-2026-33260
|
| VCID-q6d4-mv53-syhu | pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends are not affected. |
CVE-2014-7210
|
| VCID-qbnt-a5xe-2bg6 | An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker can cause a denial of service by sending crafted queries with a GSS-TSIG signature. |
CVE-2020-24697
|
| VCID-sa8k-ybav-c3ax | The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop. |
CVE-2005-0038
|
| VCID-srnu-wj3x-2qd1 | A vulnerability in PowerDNS could allow a remote attacker to create a Denial of Service condition. |
CVE-2012-0206
|
| VCID-tqpr-vezf-4ye4 | security update |
CVE-2015-5230
|
| VCID-w3fn-hwyn-6ba7 | PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave leads to DoS. |
CVE-2019-10203
|
| VCID-w9w8-k8h2-b7fc | security update |
CVE-2019-3871
|
| VCID-xa6z-cw1x-7qba | A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it. |
CVE-2026-33610
|
| VCID-xmmj-hpq2-kyad | security update |
CVE-2016-6172
|
| VCID-xvg6-5zhw-8fdk | security update |
CVE-2016-2120
|
| VCID-zcxy-ae2g-3kdy | An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker might be able to cause a double-free, leading to a crash or possibly arbitrary code execution. by sending crafted queries with a GSS-TSIG signature. |
CVE-2020-24698
|
| VCID-zdzj-q58r-5uby | security update |
CVE-2016-7074
|
| VCID-zr5j-8ewr-wkby | Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length. |
CVE-2006-4251
|