CVE-2017-15090

CVE-2017-15090 is a medium-severity vulnerability affecting PowerDNS Recursor versions 4.0.0 through 4.0.6. It allows a man-in-the-middle attacker to forge DNSSEC signatures, leading to the acceptance of invalid DNS records. The attack has high complexity but requires no user interaction, potentially resulting in high integrity impact. There is no known active exploitation, public exploit code, or significant community discussion, though it did receive limited media coverage.