[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkLeutSf0_nIDhE4N4Jywg7JPaUyqnEUd925HUUWIvys":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":54,"kevVulnerabilities":113,"topProductsByCves":114,"seoMetadata":122,"meta":131},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":53},25371,"powerdns",7,65,0,391,"2024-02-14","p",[16,21,27,32,36,42,47],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},130228,"recursor",170,34,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},130222,"authoritative",91,20,"2020-10-02",{"id":28,"product_name":29,"version_count":30,"cve_count":9,"kev_count":11,"last_cve_update":31},130223,"authoritative_server",31,"2022-03-25",{"id":33,"product_name":8,"version_count":34,"cve_count":9,"kev_count":11,"last_cve_update":35},130226,41,"2008-12-09",{"id":37,"product_name":38,"version_count":39,"cve_count":40,"kev_count":11,"last_cve_update":41},130224,"dnsdist",44,3,"2018-11-26",{"id":43,"product_name":44,"version_count":45,"cve_count":45,"kev_count":11,"last_cve_update":46},130227,"powerdns_recursor",2,"2014-09-19",{"id":48,"product_name":49,"version_count":50,"cve_count":51,"kev_count":11,"last_cve_update":52},130225,"pdns",12,1,"2018-07-16","Powerdns is a technology vendor with 7 tracked products and 65 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[55,63,70,77,82,87,93,98,103,107],{"cveId":56,"description":57,"publishedDate":13,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":61,"epssScore":62},"CVE-2023-50387","Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.",7.5,"v3.1","High",false,0.99988,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":68,"severity":60,"isKev":61,"epssScore":69},"CVE-2015-1868","The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service (CPU consumption or crash) via a request with a name that refers to itself.","2015-05-18",7.8,"v2",0.81724,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":68,"severity":75,"isKev":61,"epssScore":76},"CVE-2014-8601","PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote attackers to cause a denial of service (\"performance degradations\") via a large or infinite number of referrals, as demonstrated by resolving domains hosted by ezdns.it.","2014-12-10",5,"Medium",0.68875,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":74,"cvssVersion":68,"severity":75,"isKev":61,"epssScore":81},"CVE-2015-5311","PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets.","2015-11-17",0.67456,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":61,"epssScore":86},"CVE-2021-36754","PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exception.","2021-07-30",0.64857,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":58,"cvssVersion":91,"severity":60,"isKev":61,"epssScore":92},"CVE-2016-5427","PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a . (dot) inside labels, which allows remote attackers to cause a denial of service (backend CPU consumption) via a crafted DNS query.","2016-09-21","v3.0",0.62982,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":58,"cvssVersion":91,"severity":60,"isKev":61,"epssScore":97},"CVE-2018-16855","An issue has been found in PowerDNS Recursor before version 4.1.8 where a remote attacker sending a DNS query can trigger an out-of-bounds memory read while computing the hash of the query for a packet cache lookup, possibly leading to a crash.","2018-12-03",0.58577,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":58,"cvssVersion":91,"severity":60,"isKev":61,"epssScore":102},"CVE-2017-15120","An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service.","2018-07-27",0.51353,{"cveId":104,"description":105,"publishedDate":90,"cvssScore":58,"cvssVersion":91,"severity":60,"isKev":61,"epssScore":106},"CVE-2016-5426","PowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service (backend CPU consumption) via a long qname.",0.30631,{"cveId":108,"description":109,"publishedDate":110,"cvssScore":111,"cvssVersion":59,"severity":60,"isKev":61,"epssScore":112},"CVE-2020-10030","An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker (with enough privileges to change the system's hostname) to cause disclosure of uninitialized memory content via a stack-based out-of-bounds read. It only occurs on systems where gethostname() does not have '\\0' termination of the returned string if the hostname is larger than the supplied buffer. (Linux systems are not affected because the buffer is always large enough. OpenBSD systems are not affected because the returned hostname always has '\\0' termination.) Under some conditions, this issue can lead to the writing of one '\\0' byte out-of-bounds on the stack, causing a denial of service or possibly arbitrary code execution.","2020-05-19",8.8,0.23889,[],[115,116,117,118,119,120,121],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":9,"kev_count":11,"last_cve_update":31},{"id":33,"product_name":8,"version_count":34,"cve_count":9,"kev_count":11,"last_cve_update":35},{"id":37,"product_name":38,"version_count":39,"cve_count":40,"kev_count":11,"last_cve_update":41},{"id":43,"product_name":44,"version_count":45,"cve_count":45,"kev_count":11,"last_cve_update":46},{"id":48,"product_name":49,"version_count":50,"cve_count":51,"kev_count":11,"last_cve_update":52},{"title":123,"metaDescription":124,"keywords":125,"structuredData":126},"Powerdns - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Powerdns covering 7 products with 65 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Powerdns vulnerabilities, Powerdns security, Powerdns CVE, Powerdns threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":127,"@type":128,"name":129,"description":124,"url":130},"https:\u002F\u002Fschema.org","Organization","Powerdns","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fpowerdns",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":132,"apiVersion":133},"2026-10-17T12:54:17.291Z","3.0"]