PowerDNS Recursor NSEC Cache Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in PowerDNS Recursor. By publishing and querying a specially crafted zone, an attacker can cause the allocation of large entries in the negative and aggressive NSEC(3) caches, potentially leading to performance degradation.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition by degrading the performance of the PowerDNS Recursor, likely leading to increased response times or service interruptions.