PowerDNS Recursor Denial-of-Service Vulnerability via Crafted Zones

A denial-of-service vulnerability has been identified in PowerDNS Recursor version 5.2.0. An attacker can publish a zone with specific Resource Record Sets, which, when processed and cached, can lead to illegal memory accesses. This causes the Recursor to crash, disrupting service. PowerDNS Recursor 5.2.1 and versions prior to 5.2.0 are not affected.

Impact

Exploitation of this vulnerability leads to a crash of the PowerDNS Recursor, causing a denial-of-service condition.

Remediation

Users are advised to upgrade to PowerDNS Recursor version 5.2.1, which addresses this vulnerability.