Veille CVE

Recherche « PowerDNS Recursor »

10 CVE

Critique 0 Élevée 2 Moyenne 6 Faible 2 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « PowerDNS Recursor » ✕
  1. CVE-2026-52688 7.5 Élevée

    PowerDNS Recursor

    RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation

  2. CVE-2026-52686 3.7 Faible

    PowerDNS Recursor

    The issue is a DNSSEC validation bypass where wildcard expansion proofs (NSEC/NSEC3 records) are accepted without signature validation when the wildcard answer is a CNAME or DNAME record.

  3. CVE-2026-52684 3.7 Faible

    PowerDNS Recursor

    If the auth responds very slowly and the records expire in between, the capping of TTLs is not enforced for lack of data. This does not happen on regular resolve as then then the child records are used immediately if not expired and thus valid, or the records are expired, and in that case not used. So this case can only happen if almost expired records are used to refresh the authoritative NS records.

  4. CVE-2026-52690 5.9 Moyenne

    PowerDNS Recursor

    Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail.

  5. CVE-2026-42390 5.3 Moyenne

    PowerDNS Recursor

    An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation.

  6. CVE-2026-42389 5.3 Moyenne

    PowerDNS Recursor

    This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers.

  7. CVE-2026-42388 5.9 Moyenne

    PowerDNS Recursor

    Incomplete validation of the SOA record present in a catalog zone might lead to a crash.

  8. CVE-2026-42387 5.9 Moyenne

    PowerDNS Recursor

    A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recursor due to insuffcient input validation.

  9. CVE-2026-40012 5.3 Moyenne

    PowerDNS Recursor

    ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled;

  10. CVE-2026-33612 7.5 Élevée

    PowerDNS Recursor

    A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.