PowerDNS Authoritative crafted packet can cause denial of service
Original title: PowerDNS Security Advisory 2026-13: Crafted packet using compression pointers can lead to denial of service
CVE-2026-73206 affects versions through 4.9.17, 5.0.7 and 5.1.4; fixes are 4.9.18, 5.0.8 and 5.1.5.
PowerDNS Security Advisory 2026-13 says a crafted packet using compression pointers can cause a denial of service in PowerDNS Authoritative Server. Affected releases are up to and including 4.9.17, 5.0.7 and 5.1.4. Versions 4.9.18, 5.0.8 and 5.1.5 are not affected. The vendor rates the issue High. The posted snippet cuts off at the exploit field.
Unconfirmed: The feed snippet ends before stating whether an exploit exists.
- CVE-2026-73206 was disclosed on October 21 and discovered on July 10.
- Impact stated by PowerDNS is denial of service.
- Fixed releases are 4.9.18, 5.0.8 and 5.1.5.
Impact: Denial of service via a crafted packet
| Product | Affected | Fixed in |
|---|---|---|
| PowerDNS Authoritative Server | up to and including 4.9.17, 5.0.7 and 5.1.4 | 4.9.18, 5.0.8 and 5.1.5 |
- 1.Update PowerDNS Authoritative Server to 4.9.18, 5.0.8 or 5.1.5.
- CVEs
- CVE-2026-73206
- Vendors
- PowerDNS
- Products
- PowerDNS Authoritative Server
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-73206 | — | — | — |
From the original article
Posted by Miod Vallat on Oct 21 PowerDNS Security Advisory 2026-13: Crafted packet using compression pointers can lead to denial of service * CVE: CVE-2026-73206 * Date: 2026-10-21T00:00:00+01:00 * Discovery date: 2026-07-10T00:00:00+01:00 * Affects: PowerDNS Authoritative Server up to and including 4. 9. 17, 5.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.