PT-2026-34322 · Powerdns · Powerdns Recursor

Haruto Kimura · Published 2026-04-22 · Updated 2026-04-23 · CVE-2026-33258

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description An attacker can cause the allocation of large entries in the negative and aggressive NSEC(3) caches by publishing and querying a crafted zone.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2026-33258

Affected Products

Powerdns Recursor

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2026-33258 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-33258 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-33258 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-33258 · Vendor Advisory
• https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-03.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-33258 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-33258 · Security Note
• https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-03.html#cve-2026-33258-crafted-zones-can-cause-increased-resource-usage · Note
• https://twitter.com/CVEnew/status/2047012154885451869 · Twitter Post