FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

PowerDNS Authoritative Server -- Denial of Service vulnerability

Affected packages
		powerdns	<	5.1.5

Details

VuXML ID	eb135656-db92-11f1-83b3-3c7c3fba4204
Discovery	2026-07-10
Entry	2026-11-08

PowerDNS Team reports:

CVE ID: CVE-2026-73206

A malicious server can send a crafted reply that leads to high resource utilization decompression name pointers in DNS packets.

This is a multi-vendor issue. Multiple DNS vendors are releasing fixed version of their products.

The remedy is: upgrade to a patched version. The patched version imposes limits on the number of decompression done for a single name and for a DNS packet as a whole.

[source]

References

CVE Name	CVE-2026-73206
URL	https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-13.html