CVE-2009-4009
NoneCVSS
—
EPSS
17.6%
Published
Jan 8, 2010
CISA due date
—
The record
Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted packets.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | pdns-recursor | 0 | 3.1.7.2-1 |
| Debian:11 | pdns-recursor | 0 | 3.1.7.2-1 |
| Debian:12 | pdns-recursor | 0 | 3.1.7.2-1 |
| Debian:13 | pdns-recursor | 0 | 3.1.7.2-1 |
| Debian:5.0 | pdns-recursor | 0 | 3.1.7-1+lenny1 |
| openSUSE:Tumbleweed | pdns-recursor | 0 | 4.0.3-1.2 |
Related vulnerabilities
- CVE-2009-4010 Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to… Also affects pdns-recursor
- CVE-2024-25590 An attacker can publish a zone containing specific Resource Record Sets. Also affects pdns-recursor
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects pdns-recursor
- CVE-2015-5470 The label decompression functionality in PowerDNS Recursor before 3.6.4 and 3.7.x before… Also affects pdns-recursor
- CVE-2015-1868 The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and… Also affects pdns-recursor
- CVE-2014-8601 PowerDNS Recursor before 3.6.2 does not limit delegation chaining, which allows remote… Also affects pdns-recursor
- CVE-2024-25583 A crafted response from an upstream server the recursor has been configured to… Also affects pdns-recursor
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119