Description (CNA)
An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PowerDNS / Authoritative | affected 5.0.0 before 5.0.4; affected 4.9.0 before 4.9.14 |
| PowerDNS / DNSdist | affected 1.9.0 before 1.9.13; affected 2.0.0 before 2.0.4 |
| PowerDNS / Recursor | affected 5.4.0 before 5.4.1; affected 5.3.0 before 5.3.6; affected 5.2.0 before 5.2.9 |
CWE
No CWE identifiers supplied.
References
- https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html
- https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-04.html
- https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-03.html
ADP enrichment
No English description supplied.
No references supplied.