Powerdns
Vulnerability activity for Powerdns: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 40
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 4.9MediumMay 21, 2026Powerdns authoritative Code / command injectionCVE-2026-42396Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail
- 5.9MediumMay 21, 2026Powerdns authoritativeCVE-2026-42002Concurrency and locking defects in GSS-TSIG
- 7.5HighMay 21, 2026Powerdns authoritative Denial of serviceCVE-2026-42001Insufficient Validation of Autoprimary SOA Queries
- 6.8MediumMay 21, 2026Powerdns authoritative Code / command injectionCVE-2026-42000Insufficient Validation of Names During AXFR
- 4.8MediumMay 21, 2026Powerdns authoritative Auth bypass / access controlCVE-2026-41999Incorrect Behaviour of Views with TCP PROXY Requests
- 6.5MediumApr 22, 2026Powerdns authoritative Memory corruptionCVE-2026-33611An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database corruption, if using the LMDB backend.
- 5.9MediumApr 22, 2026Powerdns authoritative Denial of serviceCVE-2026-33610A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.
- 5.3MediumApr 22, 2026Powerdns authoritativeCVE-2026-33609Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.
- 7.4HighApr 22, 2026Powerdns authoritative Code / command injectionCVE-2026-33608An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an invalid one, leading to the backend no longer able to run on the next restart, requiring manual operation to fix it.
- 6.5MediumApr 22, 2026Powerdns dnsdist Memory corruptionCVE-2026-33602A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a denial of service.
- 3.1LowApr 22, 2026Powerdns dnsdist Memory corruptionCVE-2026-33599A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newServer or auto_upgrade (YAML) settings. DDR upgrade is not enabled by default.
- 4.8MediumApr 22, 2026Powerdns dnsdist Memory corruptionCVE-2026-33598A cached crafted response can cause an out-of-bounds read if custom Lua code calls getDomainListByAddress() or getAddressListByDomain() on a packet cache.
- 3.7LowApr 22, 2026Powerdns dnsdist Denial of serviceCVE-2026-33597PRSD detection denial of service
- 3.1LowApr 22, 2026Powerdns dnsdist Memory corruptionCVE-2026-33596A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by sending a flood of perfectly timed queries that are routed to a TCP-only or DNS over TLS backend.
- 5.3MediumApr 22, 2026Powerdns dnsdist Denial of serviceCVE-2026-33595A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly released until the end of the connection.
- 5.3MediumApr 22, 2026Powerdns dnsdist Denial of serviceCVE-2026-33594A client can trigger excessive memory allocation by generating a lot of queries that are routed to an overloaded DoH backend, causing queries to accumulate into a buffer that will not be released until the end of the connection.
- 7.5HighApr 22, 2026Powerdns dnsdistCVE-2026-33593A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query.
- 5.3MediumApr 22, 2026Powerdns dnsdist Denial of serviceCVE-2026-33254An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service. DOQ and DoH3 are disabled by default.
- 4.4MediumApr 22, 2026Powerdns recursor Memory corruptionCVE-2026-33601If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zone that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service.
- 4.4MediumApr 22, 2026Powerdns recursor Memory corruptionCVE-2026-33600An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service.
- 5.9MediumApr 22, 2026Powerdns recursor Memory corruptionCVE-2026-33262An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default.
- 5.9MediumApr 22, 2026Powerdns recursor Denial of serviceCVE-2026-33261A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service.
- 5.3MediumApr 22, 2026Powerdns authoritative Denial of serviceCVE-2026-33260An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.
- 5.0MediumApr 22, 2026Powerdns recursor Memory corruptionCVE-2026-33259Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a crash of the recursor. Normally concurrent transfers of the same RPZ zone can only occur with a malfunctioning RPZ provider.
- 5.3MediumApr 22, 2026Powerdns recursor Denial of serviceCVE-2026-33258By publishing and querying a crafted zone an attacker can cause allocation of large entries in the negative and aggressive NSEC(3) caches.
- 5.3MediumApr 22, 2026Powerdns authoritative Denial of serviceCVE-2026-33257An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.
- 5.3MediumApr 22, 2026Powerdns recursor Denial of serviceCVE-2026-33256An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.
- 4.8MediumMar 31, 2026Powerdns dnsdist Memory corruptionCVE-2026-27854An attacker might be able to trigger a use-after-free by sending crafted DNS queries to a DNSdist using the DNSQuestion:getEDNSOptions method in custom Lua code. In some cases DNSQuestion:getEDNSOptions might refer to a version of the DNS packet that has been modified, thus triggering a use-after-free and potentially a crash resulting in denial of service.
- 5.9MediumMar 31, 2026Powerdns dnsdist Memory corruptionCVE-2026-27853An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. In some cases the rewritten packet might become larger than the initial response and even exceed 65535 bytes, potentially leading to a crash resulting in denial of service.
- 5.3MediumMar 31, 2026Powerdns dnsdist Denial of serviceCVE-2026-24030An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service. In setups with a large quantity of memory available this usually results in an exception and the QUIC connection is properly closed, but in some cases the system might enter an out-of-memory state instead and terminate the process.
- 6.5MediumMar 31, 2026Powerdns dnsdist Auth bypass / access controlCVE-2026-24029When the early_acl_drop (earlyACLDrop in Lua) option is disabled (default is enabled) on a DNS over HTTPs frontend using the nghttp2 provider, the ACL check is skipped, allowing all clients to send DoH queries regardless of the configured ACL.
- 5.3MediumMar 31, 2026Powerdns dnsdist Memory corruptionCVE-2026-24028An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential information disclosure.
- 3.1LowMar 31, 2026Powerdns dnsdistCVE-2026-0397When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard into visiting a malicious website and extract information about the running configuration from the dashboard. The root cause of the issue is a misconfiguration of the Cross-Origin Resource Sharing (CORS) policy.
- 3.1LowMar 31, 2026Powerdns dnsdist XSSCVE-2026-0396An attacker might be able to inject HTML content into the internal web dashboard by sending crafted DNS queries to a DNSdist instance where domain-based dynamic rules have been enabled via either DynBlockRulesGroup:setSuffixMatchRule or DynBlockRulesGroup:setSuffixMatchRuleFFI.
- 5.3MediumFeb 9, 2026Powerdns recursor Auth bypass / access controlCVE-2026-24027Crafted zones can lead to increased incoming network traffic.
- 5.3MediumFeb 9, 2026Powerdns recursor Denial of serviceCVE-2026-0398Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor.
- 6.5MediumFeb 9, 2026Powerdns recursor Auth bypass / access controlCVE-2025-59024Crafted delegations or IP fragments can poison cached delegations in Recursor.
- 8.2HighFeb 9, 2026Powerdns recursor Auth bypass / access controlCVE-2025-59023Crafted delegations or IP fragments can poison cached delegations in Recursor.
- 7.5HighDec 9, 2025Powerdns recursor Privilege escalationCVE-2025-59030An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP.
- 5.3MediumDec 9, 2025Powerdns recursorCVE-2025-59029An attacker can trigger an assertion failure by requesting crafted DNS records, waiting for them to be inserted into the records cache, then send a query with qtype set to ANY.
Top products
- dnsdist16 CVEs in the last year
- recursor13 CVEs in the last year
- authoritative11 CVEs in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.