GCVE - cpe:2.3:a:powerdns:recursor:3.1.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:powerdns:recursor:3.1.4:*:*:*:*:*:*:*

part: a version: 3.1.4 update: *

Vendor	Powerdns (`ef825119-8390-5906-a637-f6692acc90eb`)
Product	Recursor (`747fb593-573c-5107-91c6-5adf2a41b0ef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/pdns-recursor`	purl2cpe	2026-06-01 10:12:49.048483
`pkg:deb/ubuntu/pdns-recursor`	purl2cpe	2026-06-01 10:12:49.048484
`pkg:github/powerdns/pdns`	purl2cpe	2026-06-01 10:12:49.048486
`pkg:rpm/fedora/pdns-recursor`	purl2cpe	2026-06-01 10:12:49.048488
`pkg:rpm/opensuse/pdns-recursor`	purl2cpe	2026-06-01 10:12:49.048489

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-4010`	vulnerable	2026-06-08 04:51:46.106786	Details available Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones. Published: 2010-01-08T17:00:00.000Z Updated: 2024-08-07T06:45:50.898Z Open on db.gcve.eu Reference links https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00217.html http://doc.powerdns.com/powerdns-advisory-2010-02.html http://www.securityfocus.com/archive/1/508743/100/0/threaded http://securitytracker.com/id?1023404 https://bugzilla.redhat.com/show_bug.cgi?id=552285	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4009`	vulnerable	2026-06-08 04:51:46.103907	Details available Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted packets. Published: 2010-01-08T17:00:00.000Z Updated: 2024-08-07T06:45:50.893Z Open on db.gcve.eu Reference links https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00217.html http://securitytracker.com/id?1023403 http://www.securityfocus.com/archive/1/508743/100/0/threaded http://doc.powerdns.com/powerdns-advisory-2010-01.html https://bugzilla.redhat.com/show_bug.cgi?id=552285	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3217`	vulnerable	2026-06-08 04:50:33.479925	Details available PowerDNS Recursor before 3.1.6 does not always use the strongest random number generator for source port selection, which makes it easier for remote attack vectors to conduct DNS cache poisoning. NOTE: this is related to incomplete integration of security improvements associated with addressing CVE-2008-1637. Published: 2008-07-18T16:00:00.000Z Updated: 2024-08-07T09:28:41.717Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2008/07/16/12 http://wiki.powerdns.com/cgi-bin/trac.fcgi/changeset/1179 http://secunia.com/advisories/31311 http://www.openwall.com/lists/oss-security/2008/07/09/10 http://www.openwall.com/lists/oss-security/2008/07/10/6	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.