CVE-2019-3806

—

CVSS 3.1

8.1 high

EPSS

1%p72

Published

Jan 29, 2019 (Jan 29, 2019)

Modified

Jun 17, 2026

Description

An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua.

Vendors: powerdns
Products: recursor
Weakness: CWE-358
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.