CVE-2022-27227: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 5% chance of exploitation in the next 30 days.

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
• Powerdns Authoritative Server: before 4.4.3 (fixed in 4.4.3); from 4.5.0, before 4.5.4 (fixed in 4.5.4); from 4.6.0, before 4.6.1 (fixed in 4.6.1)
• Powerdns Recursor: before 4.4.8 (fixed in 4.4.8); from 4.5.0, before 4.5.8 (fixed in 4.5.8); from 4.6.0, before 4.6.1 (fixed in 4.6.1)

Published 2022-03-25. Last modified 2026-06-17.