PowerDNS DNSdist Denial-of-Service Vulnerability via Uncontrolled Memory Allocation in Internal Web Server

A denial-of-service vulnerability has been identified in PowerDNS DNSdist versions through 2.0.3 and 1.9.12. The issue arises from the internal web server, which is disabled by default, allowing an attacker to send crafted HTTP requests that cause unlimited memory allocation. This excessive memory use can lead to a service crash.

Impact

Exploitation of this vulnerability causes excessive memory consumption, leading to a denial-of-service condition where the service becomes unresponsive or unavailable.

Remediation

Users can upgrade to PowerDNS DNSdist versions 1.9.13 or 2.0.4, where this vulnerability has been patched. Alternatively, the internal web server can be disabled or restricted to trusted clients.