PowerDNS Multiple Vulnerabilities - Remote Code Execution Risk

CERT-Bund identified multiple security vulnerabilities in Open Source PowerDNS affecting versions below 1.9.12 and 2.0.3, with a CVSS Base Score of 8.1 (high severity). The vulnerabilities allow unauthenticated remote attackers to exploit information disclosure, security bypass, and denial of service conditions, with potential for arbitrary code execution. Affected platforms include Linux, UNIX, Windows, and other operating systems.

Organizations operating PowerDNS installations must immediately audit their environments to identify affected versions, apply available patches to reach minimum safe versions (1.9.12 or 2.0.3), or implement recommended mitigations. Failure to address these vulnerabilities could expose DNS infrastructure to remote compromise, data exfiltration, or service disruption.