CVE-2009-4009: Powerdns Recursor

High severity, CVSS 10.0. EPSS: 17.6% chance of exploitation in the next 30 days.

Buffer overflow in PowerDNS Recursor before 3.1.7.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via crafted packets.

Affected products

• Powerdns Recursor: up to and including 3.1.7.2; version 2.0_rc1 only; version 2.8 only; version 2.9.15 only; version 2.9.16 only; version 2.9.17 only; …

Published 2010-01-08. Last modified 2026-06-16.