Allele Security Alert
Denial of service via NOTIFY packets
PowerDNS Authoritative Server
PowerDNS Authoritative up to and including 4.1.8
PowerDNS 4.1.9, 4.0.8
Proof of concept
An issue has been found in PowerDNS Authoritative Server allowing a remote, authorized master server to cause a high CPU load or even prevent any further updates to any slave zone by sending a large number of NOTIFY messages. Note that only servers configured as slaves are affected by this issue.
PowerDNS Security Advisory 2019-05: Denial of service via NOTIFY packets
If there is any error in this alert or you wish a comprehensive analysis, let us know.
Last modified: June 25, 2019