High · published December 9, 2025
⚡ A single crafted NOTIFY query is all it takes to wipe out cached records on your server! Think of it like a restaurant manager who can clear the entire order history just by saying, "Forget all previous orders" — that’s the kind of access an attacker gains here! If exploited, an attacker could erase cached data, potentially causing downtime and disrupting services for users. Imagine a busy restaurant suddenly running out of orders to fulfill, leaving patrons and staff in confusion!
Think of it like a restaurant manager who can clear the entire order history just by saying, "Forget all previous orders" — that’s the kind of access an attacker gains here! This vulnerability allows an attacker to send a NOTIFY command over TCP, triggering the removal of cached records without proper authorization checks.
If exploited, an attacker could erase cached data, potentially causing downtime and disrupting services for users. Imagine a busy restaurant suddenly running out of orders to fulfill, leaving patrons and staff in confusion! To protect against this, ensure your system is updated with the latest patches. Review your server configurations, and restrict access to NOTIFY commands only to trusted sources. 🌐 You've got this! With these steps, you're on your way to locking it down and keeping your server safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| powerdns/recursor | ≥ 5.1.0, < 5.1.9 | 5.1.9 |
| powerdns/recursor | ≥ 5.2.0, < 5.2.7 | 5.2.7 |
| powerdns/recursor | ≥ 5.3.0, < 5.3.3 | 5.3.3 |