Description
Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | pdns-recursor | 3.1.7.2-1 | — |
| Debian 13 | pdns-recursor | 3.1.7.2-1 | — |
| Debian 12 | pdns-recursor | 3.1.7.2-1 | — |
| Debian 5.0 | pdns-recursor | 3.1.7-1+lenny1 | DSA-1968-1 |
| Debian 4.0 | pdns-recursor | 3.1.4+v3.1.7-0+etch1 | DSA-1968-2 |
Advisories 2
- DSA-1968-1 pdns-recursor - potential code execution Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1968-2 pdns-recursor - cache poisoning Debian Security (DSA / DLA) · Mar 9, 2026
References
- FEDORA-2010-0209 vendor-advisory
- http://doc.powerdns.com/powerdns-advisory-2010-02.html
- 20100106 Critical PowerDNS Recursor Security Vulnerabilities: please upgrade ASAP to 3.1.7.2 mailing-list
- 1023404 vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=552285
- 38004 third-party-advisory
- FEDORA-2010-0228 vendor-advisory
- 38068 third-party-advisory
- 37653 vdb-entry
- powerdns-zones-spoofing(55439) vdb-entry
- ADV-2010-0054 vdb-entry