CVE-2016-6172

PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large (1) AXFR or (2) IXFR response.

• CWE-400

• http://lists.opensuse.org/opensuse-updates/2016-08/msg00085.htmlThird Party Advisory
• http://www.debian.org/security/2016/dsa-3664
• http://www.openwall.com/lists/oss-security/2016/07/06/3Mailing List
• http://www.securityfocus.com/bid/91678
• http://www.securitytracker.com/id/1036242
• https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-401Release Notes
• https://github.com/PowerDNS/pdns/issues/4128Issue Tracking
• https://github.com/PowerDNS/pdns/issues/4133Issue Tracking
• https://github.com/PowerDNS/pdns/pull/4134Issue Tracking
• https://github.com/sischkg/xfer-limit/blob/master/README.mdPatch
• https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-08/msg00085.htmlThird Party Advisory
• http://www.debian.org/security/2016/dsa-3664
• http://www.openwall.com/lists/oss-security/2016/07/06/3Mailing List
• http://www.securityfocus.com/bid/91678
• http://www.securitytracker.com/id/1036242
• https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-401Release Notes
• https://github.com/PowerDNS/pdns/issues/4128Issue Tracking
• https://github.com/PowerDNS/pdns/issues/4133Issue Tracking
• https://github.com/PowerDNS/pdns/pull/4134Issue Tracking
• https://github.com/sischkg/xfer-limit/blob/master/README.mdPatch
• https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.htmlMailing List, Third Party Advisory

Published

Sep 26, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6164Integer overflow in the mov_build_index function in libavfor…
• CVE-2016-6167Multiple untrusted search path vulnerabilities in Putty beta…7.8
• CVE-2016-6168Use-after-free vulnerability in Foxit Reader and PhantomPDF …
• CVE-2016-6169Heap-based buffer overflow in Foxit Reader and PhantomPDF 7.…
• CVE-2016-6170ISC BIND through 9.9.9-P1, 9.10.x through 9.10.4-P1, and 9.1…6.5
• CVE-2016-6171Knot DNS before 2.3.0 allows remote DNS servers to cause a d…8.6
• CVE-2016-6173NSD before 4.1.11 allows remote DNS master servers to cause …
• CVE-2016-6174applications/core/modules/front/system/content.php in Invisi…
• CVE-2016-6175Eval injection vulnerability in php-gettext 1.0.12 and earli…
• CVE-2016-6177The Huawei OceanStor 5800 V300R003C00 has an integer overflo…
• CVE-2016-6178Huawei NE40E and CX600 devices with software before V800R007…
• CVE-2016-6179The WiFi driver in Huawei Honor 6 smartphones with software …