CVE-2019-3807

—

CVSS 3.0

9.8 critical

EPSS

<1%p29

Published

Jan 29, 2019 (Jan 29, 2019)

Modified

Jun 17, 2026

Description

An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of responses received from authoritative servers with the AA flag not set were not properly validated, allowing an attacker to bypass DNSSEC validation.

Vendors: powerdns
Products: recursor
Weakness: CWE-345, CWE-295
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.