CVE search results

11 – 20 of 105 results

Detailed view

Sort by:

CVE-2026-33612

Medium priority

Needs evaluation

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.

1 affected package

pdns-recursor

Package	26.04 LTS	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns-recursor	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2026-42005

Medium priority

Needs evaluation

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.

3 affected packages

dnsdist, pdns, pdns-recursor

Package	26.04 LTS	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
dnsdist	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
pdns	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation
pdns-recursor	Not affected	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2026-42396

Medium priority

Needs evaluation

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail

1 affected package

pdns

Package	26.04 LTS	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2026-42002

Medium priority

Needs evaluation

Concurrency and locking defects in GSS-TSIG

1 affected package

pdns

Package	26.04 LTS	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2026-42001

Medium priority

Needs evaluation

Insufficient Validation of Autoprimary SOA Queries

1 affected package

pdns

Package	26.04 LTS	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2026-42000

Medium priority

Needs evaluation

Insufficient Validation of Names During AXFR

1 affected package

pdns

Package	26.04 LTS	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2026-41999

Medium priority

Needs evaluation

Incorrect Behaviour of Views with TCP PROXY Requests

1 affected package

pdns

Package	26.04 LTS	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2026-33611

Medium priority

Needs evaluation

An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database corruption, if using the LMDB backend.

1 affected package

pdns

Package	26.04 LTS	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2026-33610

Medium priority

Needs evaluation

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.

1 affected package

pdns

Package	26.04 LTS	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

CVE-2026-33609

Medium priority

Needs evaluation

Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.

1 affected package

pdns

Package	26.04 LTS	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
pdns	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation	Needs evaluation

Export to JSON

Results by page:

Search CVE reports