Denial of Service Vulnerability in PowerDNS Internal Web Server

CVE-2026-42005

What is CVE-2026-42005?

An attacker can exploit a vulnerability in the internal web server of PowerDNS by sending a specially crafted web request. This request can lead to unlimited memory allocation, causing the server to become unresponsive and resulting in a denial of service. It is important to note that the internal web server is disabled by default, which may mitigate the risk for some users. However, users should remain vigilant and apply the recommended security updates to prevent potential exploitation.

References