DSA-6421-1 pdns-recursor - security update
A vulnerability was discovered in PowerDNS Recursor ("pdns-recursor"), a resolving name server, which may result in denial of service (increased memory and CPU usage) when processing a specially crafted DNS packet. https://security-tracker.debian.org/tracker/DSA-6421-1
CSIRTS triage
- What
- A specially crafted DNS packet causes increased memory and CPU usage in the recursive resolver.
- Who is affected
- Deployments of PowerDNS Recursor running vulnerable versions.
- Urgency
- Moderate; denial of service via resource exhaustion is possible but not actively exploited.
- Action
- Apply the security update from Debian (DSA-6421-1) or upgrade to the patched version from PowerDNS.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch PowerDNS Recursor
Get an email when a new PowerDNS Recursor advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://lists.debian.org/debian-security-announce/2026/msg00332.html
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-52682 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- medium[NEW] [medium] PowerDNS: Vulnerability Enables Denial of Servicecert-bund
- unknownDSA-6419-1 dnsdist - security updatedebian
- unknownDSA-6420-1 pdns - security updatedebian
More from Debian Security Advisories
- unknownDSA-6497-1 xorg-server - security update2026-09-12
- highDSA-6496-1 nginx - security update2026-09-12
- unknownDSA-6495-1 spip - security update2026-09-11
- unknownDSA-6494-1 kamailio - security update2026-09-11
- unknownDSA-6493-1 libevent - security update2026-09-11