CVE-2016-6172

—

CVSS 3.0

6.8 medium

EPSS

4%p89

Published

Sep 26, 2016 (Sep 26, 2016)

Modified

Jun 17, 2026

Description

PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large (1) AXFR or (2) IXFR response.

Vendors: opensuse powerdns
Products: leap, opensuse, authoritative server
Weakness: CWE-400
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news0 stories

No ingested article mentions this CVE yet.