PowerDNS Recursor before 3.6.2 does not limit delegation chaining which allows remote attackers to cause a denial of service (\performance degradations\) via a large or infinite number of referrals as demonstrated by resolving domains hosted by ezdns.it.