Every CVE Search/ Get API key

CVE-2022-37428

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled,...

6.5 MediumFix available

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.44%Up 0.6 points since Aug 24, 2022
90%50%10%1%

What each source reports

CVE List Score used 6.5

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.

Record
CVE-2022-37428
CVSS 3.1
6.5 MediumCVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:L/S:U/UI:N
Updated
2026-11-02
EUVDEUVD-2022-40058 6.5

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.

Record
EUVD-2022-40058
CVSS 3.1
6.5 MediumCVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:L/S:U/UI:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-w3r7-9rrf-88pm 6.5

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled,...

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.

Record
GHSA-w3r7-9rrf-88pm
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-459
Updated
2026-11-02
NVD 6.5

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.

Record
CVE-2022-37428
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-459
Updated
2026-11-02
OSVALPINE-CVE-2022-37428 6.5

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.

Record
ALPINE-CVE-2022-37428
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSV 6.5

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.

Record
CVE-2022-37428
CVSS 3.1
6.5 MediumCVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:L/S:U/UI:N
Updated
2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2022-37428 6.5

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.

Record
UBUNTU-CVE-2022-37428
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-37428 No score

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.

Record
DEBIAN-CVE-2022-37428
Updated
2026-11-03
OSVopenSUSE-SU-2022:10171-1 No score

Security update for pdns-recursor

This update for pdns-recursor fixes the following issues:

pdns-recursor was updated to 4.6.3:

  • fixes incomplete exception handling related to protobuf message generation (boo#1202664, CVE-2022-37428)

pdns-recursor was updated to 4.6.2:

  • Reject non-apex NSEC(3)s that have both the NS and SOA bits set
  • A CNAME answer on DS query should abort DS retrieval
  • Allow disabling of processing the root hints
  • If we get NODATA on an AAAA in followCNAMERecords, try native dns64
Record
openSUSE-SU-2022:10171-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12281-1 No score

pdns-recursor-4.7.2-1.1 on GA media

These are all security issues fixed in the pdns-recursor-4.7.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12281-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
pdns-recursor
Alpine:v3.16
 before 4.6.3-r0
4.6.3-r0
pdns-recursor
Alpine:v3.17
 before 4.7.2-r0
4.7.2-r0
pdns-recursor
Alpine:v3.18
 before 4.7.2-r0
4.7.2-r0
pdns-recursor
Alpine:v3.19
 before 4.7.2-r0
4.7.2-r0
pdns-recursor
Alpine:v3.20
 before 4.7.2-r0
4.7.2-r0
pdns-recursor
Alpine:v3.21
 before 4.7.2-r0
4.7.2-r0
pdns-recursor
Alpine:v3.22
 before 4.7.2-r0
4.7.2-r0
pdns-recursor
Alpine:v3.23
 before 4.7.2-r0
4.7.2-r0
pdns-recursor
Alpine:v3.24
 before 4.7.2-r0
4.7.2-r0
pdns-recursor
Debian:12
 before 4.7.2-1
4.7.2-1
Show 9 moreShow less
Affected packages
PackageAffectedFixed
pdns-recursor
Debian:13
 before 4.7.2-1
4.7.2-1
pdns-recursor
Debian:14
 before 4.7.2-1
4.7.2-1
pdns-recursor
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
3.7.3-14.0.0~alpha1-14.0.0~alpha1-24.0.0~alpha2-24.0.0~alpha2-2ubuntu0.14.0.0~alpha2-2ubuntu0.1+esm1
 None known
pdns-recursor
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
4.0.6-14.0.6-1build14.0.7-14.1.1-14.1.1-1build14.1.1-24.1.1-2ubuntu0.1~esm1
 None known
pdns-recursor
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
4.2.0-64.2.1-14.2.1-1build14.2.1-1build24.2.1-1ubuntu0.1~esm1
 None known
pdns-recursor
Ubuntu:Pro:22.04:LTS
 All versions, plus listed versions
4.4.2-34.6.0-1ubuntu14.6.0-1ubuntu1+esm1
 None known
pdns-recursor
SUSE:Package Hub 15 SP4
 before 4.6.3-bp154.2.3.1
4.6.3-bp154.2.3.1
pdns-recursor
openSUSE:Leap 15.4
 before 4.6.3-bp154.2.3.1
4.6.3-bp154.2.3.1
pdns-recursor
openSUSE:Tumbleweed
 before 4.7.2-1.1
4.7.2-1.1

History

History
RecordedChangedSources
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-37428 is a medium vulnerability (CVSS 6.5) in Powerdns Recursor, published August 23, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.44%, the 73rd percentile. Fixed in pdns-recursor 4.6.3-r0.

References

Show 10 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open