pkg:Debian/pdns

共 61 筆 CVECRITICAL4HIGH27MEDIUM13

✅ 檢查你的版本

所有已知漏洞

  • CRITICAL9.8CVE-2026-33608An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update…
    from 0
  • CRITICAL9.8CVE-2014-7210pdns - security update
    from 0, < 3.3.1-1
  • CRITICAL9.8CVE-2014-7210pdns - security update
    from 0, < 3.1-4.1+deb7u1
  • CRITICAL9.8CVE-2020-24698An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used.
    from 0, < 4.4.0-1
  • HIGH8.8CVE-2019-3871pdns - security update
    from 0, < 4.1.6-2
  • HIGH8.8CVE-2019-3871pdns - security update
    from 0, < 4.0.3-1+deb9u4
  • HIGH8.8CVE-2019-3871pdns - security update
    from 0, < 3.4.1-4+deb8u9
  • HIGH8.6CVE-2026-42000Insufficient Validation of Names During AXFR
    from 0
  • HIGH8.1CVE-2020-24696An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used.
    from 0, < 4.4.0-1
  • HIGH7.8CVE-2018-1046pdns before version 4.1.2 is vulnerable to a buffer overflow in dnsreplay.
    from 0, < 4.1.2-1
  • HIGH7.5CVE-2026-42002Concurrency and locking defects in GSS-TSIG
    from 0
  • HIGH7.5CVE-2026-42001Insufficient Validation of Autoprimary SOA Queries
    from 0
  • HIGH7.5CVE-2026-33610A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a…
    from 0
  • HIGH7.5CVE-2026-33260An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.
    from 0
  • HIGH7.5CVE-2026-33257An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.
    from 0
  • HIGH7.5CVE-2022-27227In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before…
    from 0
  • HIGH7.5CVE-2020-24697An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used.
    from 0, < 4.4.0-1
  • HIGH7.5CVE-2015-5230pdns - security update
    from 0, < 3.4.1-4+deb8u3
  • HIGH7.5CVE-2015-5230pdns - security update
    from 0, < 3.4.6-1
  • HIGH7.5CVE-2019-10162pdns - security update
    from 0, < 4.0.3-1+deb9u5
  • HIGH7.5CVE-2019-10162pdns - security update
    from 0, < 4.1.6-3
  • HIGH7.5CVE-2019-10162pdns - security update
    from 0, < 3.4.1-4+deb8u10
  • HIGH7.5CVE-2018-14626PowerDNS Authoritative Server 4.1.0 up to 4.1.4 inclusive and PowerDNS Recursor 4.0.0 up to 4.1.4 inclusive are vulnerable to a packet cach…
    from 0, < 4.1.5-1
  • HIGH7.5CVE-2018-10851PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9,…
    from 0, < 4.1.5-1
  • HIGH7.5CVE-2016-7068pdns-recursor - security update
    from 0, < 4.0.2-1
  • HIGH7.5CVE-2016-7072An issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a remote, unauthenticated attacker to cause a den…
    from 0, < 4.0.2-1
  • HIGH7.5CVE-2016-5427PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a .
    from 0, < 4.0.0~alpha1-1
  • HIGH7.5CVE-2016-5426pdns - security update
    from 0, < 4.0.0~alpha1-1
  • HIGH7.5CVE-2016-5426pdns - security update
    from 0, < 3.4.1-4+deb8u6
  • HIGH7.5CVE-2016-5426pdns - security update
    from 0, < 3.1-4.1+deb7u2
  • HIGH7.1CVE-2017-15091An issue has been found in the API component of PowerDNS Authoritative 4.x up to and including 4.0.4 and 3.x up to and including 3.4.11, wh…
    from 0, < 4.0.5-1
  • MEDIUM6.8CVE-2016-6172PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and…
    from 0, < 4.0.1-1
  • MEDIUM6.5CVE-2026-42396Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail
    from 0
  • MEDIUM6.5CVE-2026-33609Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.
    from 0
  • MEDIUM6.5CVE-2016-2120pdns - security update
    from 0, < 4.0.2-1
  • MEDIUM6.5CVE-2016-2120pdns - security update
    from 0, < 3.1-4.1+deb7u3
  • MEDIUM6.5CVE-2016-2120pdns - security update
    from 0, < 3.4.1-4+deb8u7
  • MEDIUM5.9CVE-2016-7074An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in…
    from 0, < 4.0.2-1
  • MEDIUM5.9CVE-2016-7073An issue has been found in PowerDNS before 3.4.11 and 4.0.2, and PowerDNS recursor before 4.0.4, allowing an attacker in position of man-in…
    from 0, < 4.0.2-1
  • MEDIUM4.9CVE-2026-33611An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn…
    from 0
  • MEDIUM4.8CVE-2026-41999Incorrect Behaviour of Views with TCP PROXY Requests
    from 0
  • MEDIUM4.3CVE-2020-17482An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records i…
    from 0, < 4.3.1-1
  • MEDIUM4.3CVE-2019-10203PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and…
    from 0, < 4.2.0-1
  • MEDIUM4.3CVE-2019-10163A Vulnerability has been found in PowerDNS Authoritative Server before versions 4.1.9, 4.0.8 allowing a remote, authorized master server to…
    from 0, < 4.1.6-3
  • CVE-2015-5311PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and ser…
    from 0, < 3.4.7-1
  • CVE-2015-5470pdns-recursor - security update
    from 0, < 3.4.1-4+deb8u2
  • CVE-2015-5470pdns-recursor - security update
    from 0, < 3.4.5-1
  • CVE-2015-1868The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Serve…
    from 0, < 3.4.4-1
  • CVE-2012-0206pdns - packet loop
    from 0, < 3.0-1.1
  • CVE-2012-0206pdns - packet loop
    from 0, < 2.9.21.2-1+lenny1
  • CVE-2008-5277PowerDNS before 2.9.21.2 allows remote attackers to cause a denial of service (daemon crash) via a CH HINFO query.
    from 0, < 2.9.21.2-1
  • CVE-2008-3337pdns - DNS spoofing
    from 0, < 2.9.20-8+etch1
  • CVE-2008-3337pdns - DNS spoofing
    from 0, < 2.9.21.1-1
  • from 0, < 2.9.20-4
  • from 0, < 2.9.17-13sarge3
  • from 0, < 2.9.17-13sarge3
  • CVE-2005-0038The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with…
    from 0, < 2.9.17-1
  • CVE-2005-2302PowerDNS before 2.9.18, when allowing recursion to a restricted range of IP addresses, does not properly handle questions from clients that…
    from 0, < 2.9.18-1
  • CVE-2005-2301pdns - several
    from 0, < 2.9.18-1
  • CVE-2005-2301pdns - several
    from 0, < 2.9.17-13sarge1
  • CVE-2005-0428The DNSPacket::expand method in dnspacket.cc in PowerDNS before 2.9.17 allows remote attackers to cause a denial of service by sending a ra…
    from 0, < 2.9.16-6