This vulnerability involves improper control of code generation in PowerDNS Authoritative. Specifically, an attacker can exploit the notify request mechanism to add a secondary domain to the bind backend with a malformed configuration. The invalid configuration causes the backend to fail on subsequent restarts, disrupting DNS service until manually fixed. The CVSS 3.1 score of 7.4 reflects high impact on integrity and availability, with network attack vector and no privileges or user interaction required.

Successful exploitation results in denial of service of the bind backend component of PowerDNS Authoritative due to configuration corruption. This disrupts DNS resolution handled by the affected server until manual remediation is performed. There is no direct confidentiality impact reported. The service disruption could affect DNS availability for domains served by the vulnerable backend.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, administrators should monitor notify requests and consider restricting or validating them to prevent unauthorized or malformed updates to the bind backend configuration. Manual recovery is required if the backend fails to start due to invalid configuration.