CVE-2022-37428: Fedoraproject Fedora

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.

Affected products

• Fedoraproject Fedora: version 36 only
• Powerdns Recursor: from 4.5.0, before 4.5.10 (fixed in 4.5.10); from 4.6.0, before 4.6.3 (fixed in 4.6.3); from 4.7.0, before 4.7.2 (fixed in 4.7.2)

Published 2022-08-23. Last modified 2026-06-17.