Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilityhigh

PowerDNS fixes crafted-packet DoS in Authoritative Server and Recursor

1 source · 2 articlesFirst reported Updated ()
What's new

October 21: Advisory 2026-13 fixes Authoritative Server CVE-2026-73206 in 4.9.18, 5.0.8 and 5.1.5; discovered July 10.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

On October 21 PowerDNS patched CVE-2026-73206, a crafted-packet denial of service, in Authoritative Server and Recursor.

PowerDNS disclosed CVE-2026-73206 on October 21 as a denial of service triggered by a crafted DNS packet. Advisory 2026-13 affects Authoritative Server through 4.9.17, 5.0.7 and 5.1.4; 4.9.18, 5.0.8 and 5.1.5 are not affected. The vendor says that issue uses compression pointers and rates it High. Advisory 2026-12, fixed in Recursor 5.3.12 and 5.4.8, names the same CVE among several issues, three rated high and the rest medium or low. The notices do not discuss exploitation.

Key facts
  • CVE-2026-73206 was disclosed October 21 and discovered July 10.
  • Authoritative Server is affected through 4.9.17, 5.0.7 and 5.1.4.
  • Fixed Authoritative releases are 4.9.18, 5.0.8 and 5.1.5.
  • Recursor fixes are 5.3.12 and 5.4.8 under Advisory 2026-12.
  • PowerDNS rates the Authoritative issue High; stated impact is denial of service.
Analyze CVE-2026-73206 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Timeline

dated events in the reporting · oldest first
  1. Jul 10, 2026CVE-2026-73206 discovered · oss-security
  2. Oct 21, 2026PowerDNS released Authoritative and Recursor fixes · oss-security

What each outlet adds

beyond the shared facts
  • oss-securityAuthoritative versions, compression pointers, High rating, July 10 discovery
  • oss-securityRecursor 5.3.12 and 5.4.8; three high CVEs in Advisory 2026-12
CVEs
CVE-2026-73206
Vendors
PowerDNS
Products
PowerDNS RecursorPowerDNS Authoritative Server

Coverage

oldest first · one row per article · UTC
  1. · 4d ago oss-securityFirst report

    PowerDNS Authoritative crafted packet can cause denial of service

    CVE-2026-73206 affects versions through 4.9.17, 5.0.7 and 5.1.4; fixes are 4.9.18, 5.0.8 and 5.1.5.

  2. · 4d ago oss-security

    PowerDNS Recursor 5.3.12 and 5.4.8 fix multiple flaws

    Advisory 2026-12 covers three high-severity CVEs; only CVE-2026-73206 is named in the notice.

Vulnerabilities in this story

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-73206
———