CVE-2014-7210
pdns: pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user
CVE-2014-7210 is fixed in pdns on 1 platform, first by DEBIAN-CVE-2014-7210, released June 26, 2025. It is not reported as exploited. Patch Radar priority: Urgent.
Urgent
CVSS
9.8
critical
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0048
41st percentile
pdns specific as packaged in Debian in version before 3.3.1-1 creates a too privileged MySQL user. It was discovered that the maintainer scripts of pdns-backend-mysql grant too wide database permissions for the pdns user. Other backends are not affected.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| pdns · Debian 12.15 (bookworm) | 3.3.1-1 | DEBIAN-CVE-2014-7210 | Jun 26, 2025 |
| pdns · Debian 13.5 (trixie) | 3.3.1-1 | DEBIAN-CVE-2014-7210 | Jun 26, 2025 |
| pdns · Debian 14 | 3.3.1-1 | DEBIAN-CVE-2014-7210 | Jun 26, 2025 |