{"id":"CVE-2014-7210","aliases":["DEBIAN-CVE-2014-7210","DLA-492-1","EUVD-2014-7083","GHSA-jh6h-88x6-fmx3"],"status":"published","title":"pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user...","description":"pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends\nare not affected.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-07","score":0.00481,"percentile":0.41766,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-276"],"published":"2016-05-29T00:00:00Z","modified":"2026-10-23T16:02:20Z","fixes":[{"ecosystem":"Debian:12","package":"pdns","fixed_in":["3.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pdns","fixed_in":["3.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pdns","fixed_in":["3.3.1-1"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"pdns","fixed_in":["3.1-4.1+deb7u1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.1-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"pdns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1-4.1+deb7u1"}]}],"versions":["3.1-4","3.1-4.1"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"debian","product":"pdns"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2016/05/msg00046.html","tags":["Mailing List","Vendor Advisory","advisory","article"]},{"url":"https://salsa.debian.org/debian/pdns/-/commit/f0de6b3583039bb63344fbd5eb246939264d7b05","tags":["Patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-7210"},{"url":"https://github.com/advisories/GHSA-jh6h-88x6-fmx3"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-7210","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-7210","description":"pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends\nare not affected.","status":"published","published":"2025-06-26T20:52:47.356Z","modified":"2025-06-27T18:43:10.094Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:33:46.631905Z"}],"euvd":[{"id":"EUVD-2014-7083","description":"pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends\nare not affected.","status":"published","published":"2025-06-26T20:52:47Z","modified":"2025-06-27T18:43:10Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:15.785343Z"}],"ghsa":[{"id":"GHSA-jh6h-88x6-fmx3","title":"pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user...","description":"pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends\nare not affected.","status":"published","published":"2025-06-26T21:31:22Z","modified":"2025-06-27T21:31:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T15:02:51.611786Z"}],"nvd":[{"id":"CVE-2014-7210","description":"pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends\nare not affected.","status":"published","published":"2025-06-26T21:15:27.757Z","modified":"2026-06-17T00:14:34.45Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:02:59.461996Z"}],"osv":[{"id":"DEBIAN-CVE-2014-7210","description":"pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends are not affected.","status":"published","published":"2025-06-26T21:15:27.757Z","modified":"2026-10-23T16:02:20.809405416Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:26.134753Z"},{"id":"CVE-2014-7210","description":"pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends\nare not affected.","status":"published","published":"2025-06-26T21:15:27Z","modified":"2026-04-10T03:44:43.475701Z","updated_at":"2026-11-02T15:43:59.654289Z"},{"id":"DLA-492-1","title":"pdns - security update","status":"published","published":"2016-05-29T00:00:00Z","modified":"2026-03-09T02:09:29.666507Z","updated_at":"2026-11-02T15:46:13.207219Z"}]}}