CVE-2018-10851: Powerdns Authoritative

High severity, CVSS 7.5. EPSS: 6% chance of exploitation in the next 30 days.

PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service.

Affected products

• Powerdns Authoritative: from 3.3, up to and including 4.1.4
• Powerdns Recursor: from 3.2, up to and including 4.1.4

Published 2018-11-29. Last modified 2026-06-17.