Authoritative
Vendor:
First CVE: May 18, 2015 · Active for 11 years
32
Total CVEs
More Total CVEs than 97% of tracked products
5.3
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
7.0
Avg CVSS
Higher Avg CVSS than 44% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Authoritative over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 18, 2015
11 years ago
Most Recent CVE
Jun 25, 2026
33 days ago
CVE Severity & Scoring
Authoritative32 CVEs
34%
59%
All CVEs352,785 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network29 (90.6%)
Unknown3 (9.4%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low25 (78.1%)
High4 (12.5%)
Unknown3 (9.4%)
User Interaction
None29 (90.6%)
Unknown3 (9.4%)
Required0 (0.0%)
Privileges Required
Low7 (21.9%)
High1 (3.1%)
None21 (65.6%)
Unknown3 (9.4%)
Top CVEs
Signals from CVEs in this product scope (32 CVEs).
32 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2015-1868HIGH The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server 3.2.x, 3.3.x before 3.3.2, and 3.4.x be | May 18, 2015 | 7.8 | 63 | NO | NO |
CVE-2016-5427HIGH PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a . (dot) inside labels, which allows remote attackers to cause a denial of service (backend CPU con | Sep 21, 2016 | 7.5 | 59 | NO | NO |
CVE-2015-5311MEDIUM PowerDNS (aka pdns) Authoritative Server 3.4.4 before 3.4.7 allows remote attackers to cause a denial of service (assertion failure and server crash) via crafted query packets. | Nov 17, 2015 | 5.0 | 54 | NO | NO |
CVE-2016-5426HIGH PowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service (backend CPU consumption) via a long qname. | Sep 21, 2016 | 7.5 | 40 | NO | NO |
CVE-2026-42000HIGH Insufficient Validation of Names During AXFR | May 21, 2026 | 8.6 | 34 | NO | NO |
CVE-2026-42002HIGH Concurrency and locking defects in GSS-TSIG | May 21, 2026 | 7.5 | 33 | NO | NO |
CVE-2026-42001HIGH Insufficient Validation of Autoprimary SOA Queries | May 21, 2026 | 7.5 | 33 | NO | NO |
CVE-2026-33608CRITICAL An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an invalid one, lea | Apr 22, 2026 | 9.8 | 30 | NO | NO |
CVE-2020-24698CRITICAL An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. A remote, unauthenticated attacker might be able to cause a double-free | Oct 2, 2020 | 9.8 | 30 | NO | NO |
CVE-2026-42396MEDIUM Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail | May 21, 2026 | 6.5 | 28 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (32 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (32 CVEs).
Media Mentions
Signals from CVEs in this product scope (32 CVEs).
Top CNAs Publishing CVEs For Authoritative
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.1.0 | 1 | 4.3 | 1.0% | 0 | 0 |
| 4.0.0 | 1 | 7.5 | 1.7% | 0 | 0 |
| 3.4.6 | 1 | 5.0 | 67.5% | 0 | 0 |
| 3.4.5 | 1 | 5.0 | 67.5% | 0 | 0 |
| 3.4.4 | 2 | 6.4 | 39.4% | 0 | 0 |
| 3.4.3 | 2 | 7.8 | 46.6% | 0 | 0 |
| 3.4.2 | 1 | 7.8 | 11.3% | 0 | 0 |
| 3.4.1 | 2 | 7.8 | 46.6% | 0 | 0 |
| 3.4.0 | 2 | 7.8 | 46.6% | 0 | 0 |
| 3.3.2 | 1 | 7.8 | 81.8% | 0 | 0 |
| 3.3.1 | 1 | 7.8 | 81.8% | 0 | 0 |
| 3.3 | 1 | 7.8 | 81.8% | 0 | 0 |
| 3.2 | 1 | 7.8 | 81.8% | 0 | 0 |