Some vulnerabilities have been reported in PowerDNS Recursor, which can be exploited by malicious people to conduct spoofing attacks and potentially compromise a vulnerable system.

1) An unspecified error exists when handling certain specially crafted packets, which can be exploited to cause a buffer overflow.

Successful exploitation may allow execution of arbitrary code.

2) An unspecified error exists handling certain specially crafted zones, which can be exploited to spoof DNS information.

The vulnerabilities are reported in PowerDNS Recursor version 3.1.7.1 and prior. PowerDNS Authoritative ('pdns_server') is not affected.

Solution
Update to version 3.1.7.2.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits anonymous third parties.

Original Advisory
1) http://doc.powerdns.com/powerdns-advisory-2010-01.html
2) http://doc.powerdns.com/powerdns-advisory-2010-02.html

Deep Links
Links available in Customer Area