PowerDNS Recursor Cached Delegation Poisoning Vulnerability

A vulnerability exists in PowerDNS Recursor versions through 5.1.7, 5.2.5, and 5.3.0, allowing crafted delegations or IP fragments to poison the cache by disrupting the delegation information validation process. This cache pollution can be exploited by spoofing packets to inject malicious delegation data, leading to improper caching behavior.

Impact

Exploitation of this vulnerability causes cache pollution, where maliciously crafted delegation information is accepted and stored, potentially disrupting normal DNS resolution processes.

Remediation

Users are advised to upgrade to PowerDNS Recursor versions 5.1.8, 5.2.6, or 5.3.1, all of which include the necessary patches to address this vulnerability.