CVE-2008-3337: Powerdns Authoritative Server

Medium severity, CVSS 6.4. EPSS: 6.1% chance of exploitation in the next 30 days.

PowerDNS Authoritative Server before 2.9.21.1 drops malformed queries, which might make it easier for remote attackers to poison DNS caches of other products running on other servers, a different issue than CVE-2008-1447 and CVE-2008-3217.

Affected products

  • Powerdns Authoritative Server: up to and including 2.9.21
  • Powerdns Powerdns: any version

Published 2008-08-08. Last modified 2026-06-16.