CVE-2023-22617

Name of the Vulnerable Software and Affected Versions PowerDNS Recursor version 4.8.0

Description A remote attacker might be able to cause infinite recursion in PowerDNS Recursor via a DNS query that retrieves DS records for a misconfigured domain, because QName minimization is used in QM fallback mode.

Recommendations For PowerDNS Recursor version 4.8.0, update to version 4.8.1 to resolve the issue. As a temporary workaround, consider restricting DNS queries for misconfigured domains to minimize the risk of exploitation.