CVE-2022-37428: PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a…

PriorityP431medium6.5CVSS 3.1

AVNACLPRLUINSUCNINAH

EPSS

1.19%

64.1th percentile

PowerDNS Recursor up to and including 4.5.9, 4.6.2 and 4.7.1, when protobuf logging is enabled, has Improper Cleanup upon a Thrown Exception, leading to a denial of service (daemon crash) via a DNS query that leads to an answer with specific properties.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
debian	pdns-recursor	< pdns-recursor 4.7.2-1 (bookworm)	pdns-recursor 4.7.2-1 (bookworm)
fedoraproject	fedora	—	—
powerdns	recursor	>= 4.5.0 < 4.5.10	4.5.10
powerdns	recursor	>= 4.6.0 < 4.6.3	4.6.3
powerdns	recursor	>= 4.7.0 < 4.7.2	4.7.2

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

osv6.5MEDIUM

vendor_debian6.5MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.