Powerdns recursor

This hub aggregates every CVE we track for Powerdns recursor, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Powerdns recursor.

• CVE-2025-59024Crafted delegations or IP fragments can poison cached delegations in Recursor6.5Feb 9, 2026
• CVE-2025-59023Crafted delegations or IP fragments can poison cached delegations in Recursor8.2Feb 9, 2026
• CVE-2026-24027Crafted zones can lead to increased incoming network traffic5.3Feb 9, 2026
• CVE-2026-0398Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor5.3Feb 9, 2026
• CVE-2025-30192A Recursor configured to send out ECS enabled queries can be sensitive to spoofing attempts7.5Jul 21, 2025
• CVE-2024-25590Crafted responses can lead to a denial of service due to cache inefficiencies in the Recursor7.5Oct 3, 2024
• CVE-2023-26437Deterred spoofing attempts can lead to authoritative servers being marked unavailable3.4Apr 4, 2023
• CVE-2020-12244An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN response lacking an SOA were not properly validated in SyncRes::processAnswer, all...7.5May 19, 2020
• CVE-2017-15094An issue has been found in the DNSSEC parsing code of PowerDNS Recursor from 4.0.0 up to and including 4.0.6 leading to a memory leak when parsing specially crafted DNSSEC ECDSA keys. These keys ar...5.9Jan 23, 2018
• CVE-2017-15092A cross-site scripting issue has been found in the web interface of PowerDNS Recursor from 4.0.0 up to and including 4.0.6, where the qname of DNS queries was displayed without any escaping, allowi...6.1Jan 23, 2018
• CVE-2017-15093When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized ...5.3Jan 23, 2018
• CVE-2014-3614Unspecified vulnerability in PowerDNS Recursor (aka pdns_recursor) 3.6.x before 3.6.1 allows remote attackers to cause a denial of service (crash) via an unknown sequence of malformed packets.5.0Sep 19, 2014
• CVE-2012-1193The resolver in PowerDNS Recursor (aka pdns_recursor) 3.3 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote a...6.4Feb 17, 2012
• CVE-2009-4010Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.7.5Jan 8, 2010
• CVE-2009-4009Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted packets.10.0Jan 8, 2010