CVE-2016-7072

An issue has been found in PowerDNS Authoritative Server before 3.4.11 and 4.0.2 allowing a remote, unauthenticated attacker to cause a denial of service by opening a large number of TCP connections to the web server. If the web server runs out of file descriptors, it triggers an exception and terminates the whole PowerDNS process. While it's more complicated for an unauthorized attacker to make the web server run out of file descriptors since its connection will be closed just after being accepted, it might still be possible.

• CWE-20
• CWE-400

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7072Issue Tracking, Third Party Advisory
• https://doc.powerdns.com/md/security/powerdns-advisory-2016-03/Vendor Advisory
• https://www.debian.org/security/2017/dsa-3764Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7072Issue Tracking, Third Party Advisory
• https://doc.powerdns.com/md/security/powerdns-advisory-2016-03/Vendor Advisory
• https://www.debian.org/security/2017/dsa-3764Third Party Advisory

Published

Sep 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7066It was found that the improper default permissions on /tmp/a…
• CVE-2016-7067Monit before version 5.20.0 is vulnerable to a cross site re…6.5
• CVE-2016-7068An issue has been found in PowerDNS before 3.4.11 and 4.0.2,…5.3
• CVE-2016-7069An issue has been found in dnsdist before 1.2.0 in the way E…5.9
• CVE-2016-7070A privilege escalation flaw was found in the Ansible Tower. …8
• CVE-2016-7071It was found that the CloudForms before 5.6.2.2, and 5.7.0.7…8.8
• CVE-2016-7073An issue has been found in PowerDNS before 3.4.11 and 4.0.2,…5.3
• CVE-2016-7074An issue has been found in PowerDNS before 3.4.11 and 4.0.2,…5.3
• CVE-2016-7075It was found that Kubernetes as used by Openshift Enterprise…7.5
• CVE-2016-7076sudo before version 1.8.18p1 is vulnerable to a bypass in th…6.4
• CVE-2016-7077foreman before 1.14.0 is vulnerable to an information leak. …4.3
• CVE-2016-7078foreman before version 1.15.0 is vulnerable to an informatio…4.3