cvedb.io
CVE-2026-33601
MEDIUM · CVSS 4.4
EPSS exploitation probability: 0%
Published 2026-04-22T10:16:52.223 · Last modified 2026-06-17T10:37:46.323

Summary

If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zone that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service.

Affected products

powerdns — recursor

Does this affect you?

Add your gear to cvedb and we'll alert you only when powerdns ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.