CVE-2022-37428

—

CVSS 3.1

6.5 medium

EPSS

1%p71

Published

Aug 23, 2022 (Aug 23, 2022)

Modified

Jun 17, 2026

Description

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.

Vendors: powerdns fedoraproject
Products: recursor, fedora
Weakness: CWE-459
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.