PT-2026-34322 · Powerdns · Powerdns Recursor

Haruto Kimura · CVE-2026-33258 · Published 2026-04-22 · Updated 2026-04-23

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An attacker can cause the allocation of large entries in the negative and aggressive NSEC(3) caches by publishing and querying a crafted zone.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-33258

Affected Products

Powerdns Recursor

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33258.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2026-33258 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-33258 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-33258 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-33258 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-33258 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33258 · Security Note
• https://osv.dev/vulnerability/CVE-2026-33258 · Vendor Advisory
• https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-03.html · Vendor Advisory
• https://github.com/PowerDNS/pdns · Note
• https://repo.powerdns.com · Note
• https://twitter.com/CVEnew/status/2047012154885451869 · Twitter Post
• https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-03.html#cve-2026-33258-crafted-zones-can-cause-increased-resource-usage · Note