Vulnerabilities > Powerdns
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2012-02-17 | CVE-2012-0206 | Resource Management Errors vulnerability in Powerdns Authoritative Server 2.9.22/3.0 common_startup.cc in PowerDNS (aka pdns) Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial of service (packet loop) via a crafted UDP DNS response. | 5.0 |
| 2010-01-08 | CVE-2009-4010 | Remote Cache Poisoning vulnerability in PowerDNS Recursor Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones. | 7.5 |
| 2010-01-08 | CVE-2009-4009 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Powerdns Recursor Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted packets. | 10.0 |
| 2008-12-09 | CVE-2008-5277 | Configuration vulnerability in Powerdns PowerDNS before 2.9.21.2 allows remote attackers to cause a denial of service (daemon crash) via a CH HINFO query. | 4.3 |
| 2008-08-08 | CVE-2008-3337 | Improper Input Validation vulnerability in Powerdns Authoritative Server and Powerdns PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217. | 6.4 |
| 2008-07-18 | CVE-2008-3217 | Numeric Errors vulnerability in Powerdns Recursor PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. | 6.8 |
| 2008-04-02 | CVE-2008-1637 | Numeric Errors vulnerability in Powerdns Recursor PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to (a) algorithmic deficiencies in rand and random functions in external libraries, (b) use of a 32-bit seed value, and (c) choice of the time of day as the sole seeding information. | 6.8 |
| 2006-11-14 | CVE-2006-4252 | Remote Denial of Service and Buffer Overflow vulnerability in PowerDNS PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a zero TTL, which triggers an infinite loop. | 5.0 |
| 2006-11-14 | CVE-2006-4251 | Remote Denial of Service and Buffer Overflow vulnerability in PowerDNS Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length. | 7.5 |
| 2006-04-27 | CVE-2006-2069 | Resource Management Errors vulnerability in Powerdns 3.0 The recursor in PowerDNS before 3.0.1 allows remote attackers to cause a denial of service (application crash) via malformed EDNS0 packets. | 5.0 |