Crafted delegations or IP fragments can poison cached delegations in Recursor.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:LPowerdns Recursor
APPPowerdns5.1.0 – 5.1.8 (bez)5.2.0 – 5.2.6 (bez)5.3.0 – 5.3.1 (bez)
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Powiązane podatności
CVE-2025-59030HIGH7.5ten sam produkt
An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP.
CVE-2023-50387HIGH7.5ten sam produkt
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote atta...
CVE-2023-50868HIGH7.5ten sam produkt
The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows r...
CVE-2023-22617HIGH7.5ten sam produkt
A remote attacker might be able to cause infinite recursion in PowerDNS Recursor 4.8.0 via a DNS query that re...
CVE-2022-27227HIGH7.5ten sam produkt
In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recurso...