CVE-2009-4010

Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof...

7.5 HighFix available

Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.

Exploit likelihood

10.3%Up 8.1 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.

Record: CVE-2009-4010
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.

Record: CVE-2009-4010
Updated: 2026-11-02

EUVDEUVD-2009-3981 No score

Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.

Record: EUVD-2009-3981
Updated: 2026-11-03

GitHub AdvisoriesGHSA-8jqr-w4hv-9rxh No score

Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof...

Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.

Record: GHSA-8jqr-w4hv-9rxh
Updated: 2026-11-02

OSV No score

Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.

Record: CVE-2009-4010
Updated: 2026-11-02

OSVDEBIAN-CVE-2009-4010 No score

Unspecified vulnerability in PowerDNS Recursor before 3.1.7.2 allows remote attackers to spoof DNS data via crafted zones.

Record: DEBIAN-CVE-2009-4010
Updated: 2026-11-02

Affected products

powerdns recursor

Affected packages

Affected packages
Package	Affected	Fixed
`pdns-recursor` Debian:12	before 3.1.7.2-1	3.1.7.2-1
`pdns-recursor` Debian:13	before 3.1.7.2-1	3.1.7.2-1
`pdns-recursor` Debian:14	before 3.1.7.2-1	3.1.7.2-1
`pdns-recursor` Debian:5.0 From an advisory covering 2 CVEs	before 3.1.7-1+lenny1, plus listed versions 3.1.7-13.1.7-1+lenny1~bpo40+1	3.1.7-1+lenny1
`pdns-recursor` Debian:4.0	before 3.1.4+v3.1.7-0+etch1, plus listed versions 3.1.4-13.1.4-1+etch13.1.4-1+etch23.1.4-23.1.4-33.1.4-43.1.4-53.1.4-6	3.1.4+v3.1.7-0+etch1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-4010 is a high vulnerability (CVSS 7.5) in Powerdns Recursor, published January 8, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.3%, the 95th percentile. Fixed in pdns-recursor 3.1.7.2-1.

References

Show 8 moreShow less