PowerDNS Invalid Configuration Vulnerability in BIND Backend via Notify Request

A vulnerability exists in PowerDNS Authoritative that allows an attacker to send a notify request, which inadvertently adds a new secondary domain to the BIND backend. This action disrupts the backend's configuration, rendering it invalid and causing the backend to fail on the next restart. As a result, manual intervention is required to restore normal operation.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, where the BIND backend fails to start correctly, causing disruption in domain name resolution services.