VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jun 26, 2025· Updated Jun 17, 2026

CVE-2014-7210

CVE-2014-7210

Description

pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends are not affected.

Affected products

5
  • Debian/pdns3 versions
    cpe:2.3:a:debian:pdns:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:debian:pdns:*:*:*:*:*:*:*:*range: <3.3.1-1
    • (no CPE)range: <3.3.1-1
    • (no CPE)range: 0
  • Debian/linux
    cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
  • Debian/pdns-backend-mysqlllm-create
    Range: <3.3.1-1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.