PowerDNS Denial-of-Service Vulnerability Due to NSEC to NSEC3 Zone Transition

A denial-of-service vulnerability has been identified in PowerDNS Recursor. The issue arises when a zone transition from NSEC to NSEC3 occurs, potentially triggering an internal inconsistency that leads to a service disruption.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition, disrupting the normal operation of the PowerDNS Recursor service.