This vulnerability in PowerDNS Recursor allows an attacker to send crafted replies that trigger a null pointer dereference due to a missing consistency check in the software. This results in a denial of service by crashing or disrupting the DNS recursor process. The issue affects versions 5.2.0 through 5.4.0. The CVSS 3.1 base score is 5.9, reflecting a network attack vector with high attack complexity, no privileges or user interaction required, and impact limited to availability (denial of service). Cookies are disabled by default, which is noted but not directly related to the vulnerability's exploitation.

Successful exploitation causes a denial of service by crashing or interrupting the PowerDNS Recursor service. There is no confidentiality or integrity impact reported. The vulnerability does not require authentication or user interaction but has a high attack complexity, limiting ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider implementing network-level protections to limit exposure to untrusted sources sending DNS replies to the recursor. Monitor vendor channels for updates and apply patches promptly once available.