High severity8.1NVD Advisory· Published Jan 29, 2019· Updated Jun 17, 2026

CVE-2019-3806

Description

An issue has been found in PowerDNS Recursor versions after 4.1.3 before 4.1.9 where Lua hooks are not properly applied to queries received over TCP in some specific combination of settings, possibly bypassing security policies enforced using Lua.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PowerDNS/Recursor2 versions
cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*range: >=4.1.4,<4.1.9
- (no CPE)range: <4.1.9, after 4.1.3
osv-coords2 versions
pkg:rpm/opensuse/pdns-recursor&distro=openSUSE%20Tumbleweed pkg:rpm/suse/pdns-recursor&distro=SUSE%20Package%20Hub%2012%20SP1
< 4.5.5-1.3+ 1 more
- (no CPE)range: < 4.5.5-1.3
- (no CPE)range: < 4.1.10-16.1
Power DNS/pdns-recursorv5
Range: versions after 4.1.3 before 4.1.9

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2019-01.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000