DEBIAN-CVE-2022-27227
- Source
- https://security-tracker.debian.org/tracker/CVE-2022-27227
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-27227.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2022-27227
- Upstream
- Published
- 2022-03-25T15:15:07Z
- Modified
- 2025-09-30T05:17:00.899932Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.
- References
Affected packages
Debian:11
pdns
Package
- Name
- pdns
- Purl
- pkg:deb/debian/pdns?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
4.*
4.4.1-1
4.4.1-2
4.4.1-3
4.4.1-4
4.5.1-1
4.5.2-1
4.5.3-1
4.6.1-1
4.6.2-1
4.6.3-1
4.7.1-1
4.7.2-1
4.7.3-1
4.7.3-2
4.8.0-1
4.8.0-2
4.8.1-1
4.8.1-2
4.8.2-1
4.8.2-2
4.8.3-1
4.8.3-2
4.8.3-3
4.8.3-4
4.9.0-1
4.9.0-2
4.9.1-1
4.9.1-2
4.9.1-3
4.9.2-1
4.9.2-2
4.9.3-1
4.9.3-2
4.9.3-3
4.9.4-1
4.9.4-2
4.9.7-1
5.*
5.0.0-1
5.0.0-2
pdns-recursor
Package
- Name
- pdns-recursor
- Purl
- pkg:deb/debian/pdns-recursor?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Affected versions
4.*
4.4.2-3
4.5.5-1
4.5.6-1
4.5.7-1
4.6.0-1
4.6.1-1
4.6.2-1
4.7.1-1
4.7.2-1
4.7.3-1
4.7.3-2
4.7.4-1
4.8.0-1
4.8.0-2
4.8.1-1
4.8.2-1
4.8.4-1
4.8.6-1
4.8.7-1
4.8.8-1
4.9.0-1
4.9.0-2
4.9.1-1
4.9.1-2
4.9.1-3
4.9.1-4
4.9.2-1
4.9.2-2
4.9.3-1
4.9.4-1
4.9.5-1
5.*
5.0.5-1
5.0.7-1
5.0.7-2
5.0.9-1
5.1.3-1
5.1.3-2
5.2.0-1
5.2.0-2
5.2.0-3
5.2.0-4
5.2.0-5
5.2.1-1
5.2.2-1
5.2.2-2
5.2.4-1
5.2.4-2
5.2.5-1
5.3.0-1
5.3.0-2
5.3.0-3
5.3.0-4
5.3.0-5