High severity7.5NVD Advisory· Published Mar 25, 2022· Updated Jun 17, 2026

CVE-2022-27227

Description

In PowerDNS Authoritative Server before 4.4.3, 4.5.x before 4.5.4, and 4.6.x before 4.6.1 and PowerDNS Recursor before 4.4.8, 4.5.x before 4.5.8, and 4.6.x before 4.6.1, insufficient validation of an IXFR end condition causes incomplete zone transfers to be handled as successful transfers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PowerDNS/Authoritative2 versions
cpe:2.3:a:powerdns:authoritative_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:powerdns:authoritative_server:*:*:*:*:*:*:*:*range: <4.4.3
- (no CPE)
PowerDNS/Recursor
cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*
Range: <4.4.8
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
PowerDNS/PowerDNS Authoritative Serverllm-fuzzy
Range: <4.4.3, <4.5.4, <4.6.1
PowerDNS/Pdns Recursorllm-fuzzy
Range: <4.4.8, <4.5.8, <4.6.1
osv-coords4 versions
pkg:rpm/opensuse/pdns&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/pdns-recursor&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/pdns-recursor&distro=openSUSE%20Tumbleweed pkg:rpm/suse/pdns-recursor&distro=SUSE%20Package%20Hub%2015%20SP3
< 4.6.1-1.1+ 3 more
- (no CPE)range: < 4.6.1-1.1
- (no CPE)range: < 4.3.5-bp153.2.3.1
- (no CPE)range: < 4.6.1-1.1
- (no CPE)range: < 4.3.5-bp153.2.3.1

cvss	0.488
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2022-27227

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions