CVE-2023-26437

Name of the Vulnerable Software and Affected Versions PowerDNS Recursor versions through 4.6.5 PowerDNS Recursor versions through 4.7.4 PowerDNS Recursor versions through 4.8.3

Description The issue is related to a denial of service vulnerability in PowerDNS Recursor, where authoritative servers can be marked as unavailable. This can be exploited by a remote attacker to cause a denial of service.

Recommendations For PowerDNS Recursor versions through 4.6.5, update to a version later than 4.6.5 to resolve the issue. For PowerDNS Recursor versions through 4.7.4, update to a version later than 4.7.4 to resolve the issue. For PowerDNS Recursor versions through 4.8.3, update to a version later than 4.8.3 to resolve the issue. As a temporary workaround, consider restricting access to the PowerDNS Recursor service until a patch is available.