Authoritative Server
Vendor:
First CVE: Aug 8, 2008 · Active for 17 years
7
Total CVEs
More Total CVEs than 85% of tracked products
1.2
Avg CVEs / Year
Higher CVE frequency than 58% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 37% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Authoritative Server over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 8, 2008
17 years ago
Most Recent CVE
Mar 25, 2022
1,586 days ago
CVE Severity & Scoring
Authoritative Server7 CVEs
57%
43%
All CVEs352,785 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network5 (71.4%)
Unknown2 (28.6%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (57.1%)
High1 (14.3%)
Unknown2 (28.6%)
User Interaction
None5 (71.4%)
Unknown2 (28.6%)
Required0 (0.0%)
Privileges Required
Low2 (28.6%)
High0 (0.0%)
None3 (42.9%)
Unknown2 (28.6%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-36754HIGH PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exception. | Jul 30, 2021 | 7.5 | 71 | NO | YES |
CVE-2019-3871HIGH A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of data coming from the user when building a HTTP request from | Mar 21, 2019 | 8.8 | 34 | NO | NO |
CVE-2022-27227HIGH In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficie | Mar 25, 2022 | 7.5 | 27 | NO | NO |
CVE-2016-6172MEDIUM PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large | Sep 26, 2016 | 6.8 | 25 | NO | NO |
CVE-2012-0206MEDIUM common_startup.cc in PowerDNS (aka pdns) Authoritative Server before 2.9.22.5 and 3.x before 3.0.1 allows remote attackers to cause a denial of service (packet loop) via a crafted | Feb 17, 2012 | 5.0 | 22 | NO | NO |
CVE-2008-3337MEDIUM PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other serve | Aug 8, 2008 | 6.4 | 19 | NO | NO |
CVE-2019-10203MEDIUM PowerDNS Authoritative daemon , pdns versions 4.0.x before 4.0.9, 4.1.x before 4.1.11, exiting when encountering a serial between 2^31 and 2^32-1 while trying to notify a slave lea | Nov 22, 2019 | 4.3 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
14.3% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Authoritative Server
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.0 | 1 | 5.0 | 5.3% | 0 | 0 |