Product by PowerDNS
Powerdns Recursor
20 known vulnerabilities in Powerdns Recursor (PowerDNS), 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2017-15094 | PowerDNS Recursor: Missing Release of Memory after Effective Lifetime | 5.9 | |
| Medium | CVE-2017-15092 | PowerDNS Recursor: Cross-site Scripting | 6.1 | |
| Not rated | CVE-2014-3614 | PowerDNS Recursor: Denial of Service | — | |
| Not rated | CVE-2012-1193 | PowerDNS Recursor: security vulnerability | — | |
| Medium | CVE-2026-40211 | Denial of service via crafted DoH3 queries | 5.3 | |
| Medium | CVE-2026-40209 | Denial of service via IXFR queries | 5.3 | |
| Medium | CVE-2026-40210 | Out-of-bounds read in SetMacAddrAction | 4.8 | |
| Medium | CVE-2026-42005 | Insufficient input validation of internal web server | 4.3 | |
| Medium | CVE-2026-42387 | Insufficient input validation in ZoneToCache | 5.9 | |
| Medium | CVE-2026-42388 | Missing input validation for catalog zones | 5.9 | |
| Medium | CVE-2026-52690 | Spoofed answers can mark an authoritative non-EDNS capable | 5.9 | |
| High | CVE-2026-52688 | RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation | 7.5 | |
| Medium | CVE-2026-40012 | Information about ECS zero scoped answers might leak to clients that use a specific ECS | 5.3 | |
| High | CVE-2026-33612 | ZoneToCache can poison the cache | 7.5 | |
| Medium | CVE-2017-15093 | PowerDNS Recursor: Improper Input Validation | 5.3 | |
| Medium | CVE-2026-42390 | ZONEMD validation can be bypassed | 5.3 | |
| Medium | CVE-2026-42389 | Reject more queries with invalid header values | 5.3 | |
| Low | CVE-2026-40208 | Denial of service via DoH3 queries | 3.7 | |
| Low | CVE-2026-42004 | EDNS options smuggling | 3.7 | |
| Low | CVE-2026-40011 | Prometheus denial of service via crafted DNS queries | 3.7 |