PowerDNS Recursor Vulnerability Summary: RCE, DoS, Info Disclosure

Vulnerability Types: - Cache Poisoning: Crafted delegations or IP fragments can poison cached delegations in Recursor - Denial of Service: Multiple advisories related to Denial of Service, including crafted responses leading to denial of service, crafted DNSSEC records, and insufficient validation issues - Cache Issues: Cache pollution via crafted query - Access Control Bypass: Access restriction bypass - Information Disclosure: Information disclosure - Insufficient DNSSEC Signature Validation: Insufficient validation of DNSSEC signatures and TSIG signatures - Configuration File Injection: Configuration file injection in the API - Cross-Site Scripting: Cross-Site Scripting in the web interface - Abnormal CPU Usage: Crafted queries can cause abnormal CPU usage - Label Decompression Bug: Label decompression bug can cause crashes or CPU spikes - Remote Crash: PowerDNS Recursor can be crashed remotely Impact: - Multiple versions of PowerDNS Recursor are affected by various vulnerabilities, potentially leading to system crashes, service disruptions, and information disclosure Additional Notes: - Each security advisory includes detailed descriptions, such as affected versions, vulnerability details, and mitigation measures - Security advisories are listed in chronological order, facilitating users to locate and understand the latest security issues

Goal Reached Thanks to every supporter — we hit 100%!

PowerDNS Recursor Vulnerability Summary: RCE, DoS, Info Disclosure