cvedb.io
CVE-2022-27227
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2022-03-25T15:15:07.697 · Last modified 2026-06-17T04:36:32.040

Summary

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.

Affected products

powerdns — authoritative_server

Does this affect you?

Add your gear to cvedb and we'll alert you only when powerdns ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.