PowerDNS Recursor before 3.6.2 allows remote attackers to cause a denial of service (performance degradation) via a request for a domain name that triggers a large number of queries to resolve, as demonstrated by resolving domains hosted by ezdns.it.