PowerDNS Recursor Multiple Cache Pollution Vulnerabilities (2025-06)

PowerDNS Recursor is prone to multiple cache pollution vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

powerdns-recursor -- cache pollution

PowerDNS Team reports: It has been brought to our attention that the Recursor does not apply strict enough validation of received delegation information. The malicious delegation information can be sent by an attacker spoofing packets...

EUVD-2006-4239

Malware in sbrugna...

EUVD-2014-8438

Malware in sbrugna...

EUVD-2020-3392

Malware in sbrugna...

EUVD-2020-4559

Malware in sbrugna...

EUVD-2017-6581

Malware in sbrugna...

EUVD-2018-6542

Malware in sbrugna...

EUVD-2019-13432

Malware in sbrugna...

EUVD-2009-3980

Malware in sbrugna...

EUVD-2014-3578

Malware in sbrugna...

EUVD-2020-6351

Malware in sbrugna...

ROS-20251007-03

The vulnerability of the high-performance open source DNS server PowerDNS Recursor is related to a a bug in the ECS implementation. Exploitation of the vulnerability could allow an attacker acting remotely, perform cache poisoning attacks...

EUVD-2022-40058

Malicious code in bioql PyPI...

EUVD-2023-26753

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-10030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0. It allows an attacker with enough privileges to change the system's hostname to...

Linux Distros Unpatched Vulnerability : CVE-2017-15093

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and...

Linux Distros Unpatched Vulnerability : CVE-2020-14196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced...

ROS-20250814-03

PowerDNS Recursor DNS server vulnerability is due to insufficient input validation. Exploitation The vulnerability could allow a remote attacker to cause a denial of service...

Linux Distros Unpatched Vulnerability : CVE-2019-3806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some...