{"action":"Upgrade pdns-recursor to 4.0.7-1 or later.","affected":[{"fixed":"4.0.7-1","introduced":"0"}],"component":"pdns-recursor","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["4.0.7-1"],"id":"tcs_01M5NC5F5VXR6YZFFG03KDJSDA","modified_at":"2026-09-01T20:03:44.377242955Z","published_at":"2018-01-23T15:29:00.383Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2017-15093","https://security-tracker.debian.org/tracker/CVE-2017-15093"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2017-15093#Debian:13/pdns-recursor","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2017-15093"}],"summary":"When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized use"}