GCVE - cpe:2.3:a:powerdns:recursor:3.1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:powerdns:recursor:3.1.2:*:*:*:*:*:*:*

part: a version: 3.1.2 update: *

Vendor	Powerdns (`ef825119-8390-5906-a637-f6692acc90eb`)
Product	Recursor (`747fb593-573c-5107-91c6-5adf2a41b0ef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/pdns-recursor`	purl2cpe	2026-06-01 10:12:49.048469
`pkg:deb/ubuntu/pdns-recursor`	purl2cpe	2026-06-01 10:12:49.048470
`pkg:github/powerdns/pdns`	purl2cpe	2026-06-01 10:12:49.048472
`pkg:rpm/fedora/pdns-recursor`	purl2cpe	2026-06-01 10:12:49.048473
`pkg:rpm/opensuse/pdns-recursor`	purl2cpe	2026-06-01 10:12:49.048475

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-4010`	vulnerable	2026-06-08 04:51:46.106752	Details available Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones. Published: 2010-01-08T17:00:00.000Z Updated: 2024-08-07T06:45:50.898Z Open on db.gcve.eu Reference links https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00217.html http://doc.powerdns.com/powerdns-advisory-2010-02.html http://www.securityfocus.com/archive/1/508743/100/0/threaded http://securitytracker.com/id?1023404 https://bugzilla.redhat.com/show_bug.cgi?id=552285	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4009`	vulnerable	2026-06-08 04:51:46.102964	Details available Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted packets. Published: 2010-01-08T17:00:00.000Z Updated: 2024-08-07T06:45:50.893Z Open on db.gcve.eu Reference links https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00217.html http://securitytracker.com/id?1023403 http://www.securityfocus.com/archive/1/508743/100/0/threaded http://doc.powerdns.com/powerdns-advisory-2010-01.html https://bugzilla.redhat.com/show_bug.cgi?id=552285	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3217`	vulnerable	2026-06-08 04:50:33.478956	Details available PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637. Published: 2008-07-18T16:00:00.000Z Updated: 2024-08-07T09:28:41.717Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2008/07/16/12 http://wiki.powerdns.com/cgi-bin/trac.fcgi/changeset/1179 http://secunia.com/advisories/31311 http://www.openwall.com/lists/oss-security/2008/07/09/10 http://www.openwall.com/lists/oss-security/2008/07/10/6	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4252`	vulnerable	2026-06-08 04:49:11.395255	Details available PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a zero TTL, which triggers an infinite loop. Published: 2006-11-14T20:00:00.000Z Updated: 2024-08-07T19:06:06.841Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/4484 http://doc.powerdns.com/powerdns-advisory-2006-02.html http://secunia.com/advisories/22824 https://exchange.xforce.ibmcloud.com/vulnerabilities/30257 http://lists.suse.com/archive/suse-security-announce/2006-Nov/0007.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4251`	vulnerable	2026-06-08 04:49:11.394557	Details available Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length. Published: 2006-11-14T19:00:00.000Z Updated: 2024-08-07T19:06:07.189Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/4484 http://www.debian.org/security/2006/dsa-1211 http://secunia.com/advisories/22824 http://lists.suse.com/archive/suse-security-announce/2006-Nov/0007.html http://www.securityfocus.com/bid/21037	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.