Description (CNA)
An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a denial of service if there is a limit to the number of concurrent connections to this backend, or if the process runs out of file descriptors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| PowerDNS / DNSdist | affected 1.9.0 before 1.9.15; affected 2.0.0 before 2.0.7 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.