Powerdns vulnerabilities
75 CVEs and advisories name Powerdns as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-30194Denial of service via crafted DoH exchange
- CVE-2025-30195A crafted zone can lead to an illegal memory access in the PowerDNS Recursor
- CVE-2024-25590Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor
- CVE-2024-25581Transfer requests received over DoH can lead to a denial of service in DNSdist
- CVE-2024-25583Crafted responses can lead to a denial of service in Recursor if recursive forwarding is configured
- CVE-2023-26437Deterred spoofing attempts can lead to authoritative servers being marked unavailable
- CVE-2015-5230The DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a den
- CVE-2019-10163A Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8 allowing a remote, authorized master server to
- CVE-2019-10162A vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.10, 4.0.8 allowing an authorized user to cause the serve
- CVE-2017-15120An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference whe
- CVE-2017-15094An issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4.0.0 up to and including 4.0.6 leading to a memory leak when p
- CVE-2017-15093When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.
- CVE-2017-15092A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname
- CVE-2017-15091An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, whe
- CVE-2017-15090An issue has been found in the DNSSEC validation component of PowerDNS Recursor from 4.0.0 and up to and including 4.0.6, where the signatur