Powerdns · Powerdns Recursor · CVE-2022-27227
**Name of the Vulnerable Software and Affected Versions**
PowerDNS Authoritative Server versions 4.4.2 and earlier, 4.5.x before 4.5.4, 4.6.x before 4.6.1
PowerDNS Recursor versions 4.4.7 and earlier, 4.5.x before 4.5.8, 4.6.x before 4.6.1
**Description**
The issue is caused by insufficient validation of an IXFR end condition, leading to incomplete zone transfers being handled as successful transfers.
**Recommendations**
For PowerDNS Authoritative Server versions 4.4.2 and earlier, update to version 4.4.3 or later.
For PowerDNS Authoritative Server versions 4.5.x before 4.5.4, update to version 4.5.4 or later.
For PowerDNS Authoritative Server versions 4.6.x before 4.6.1, update to version 4.6.1 or later.
For PowerDNS Recursor versions 4.4.7 and earlier, update to version 4.4.8 or later.
For PowerDNS Recursor versions 4.5.x before 4.5.8, update to version 4.5.8 or later.
For PowerDNS Recursor versions 4.6.x before 4.6.1, update to version 4.6.1 or later.