CVE-2026-33594

A client can trigger excessive memory allocation by generating a lot of queries that are routed to an overloaded DoH backend, causing queries to accumulate into a buffer that will not be released until the end of the connection.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*

History

24 Apr 2026, 16:48

Type Values Removed Values Added
CPE cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
First Time Powerdns dnsdist
Powerdns
References () https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-04.html - () https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-04.html - Vendor Advisory

22 Apr 2026, 15:16

Type Values Removed Values Added
CWE CWE-770

22 Apr 2026, 14:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-04-22 14:16

Updated : 2026-04-24 16:48


NVD link : CVE-2026-33594

Mitre link : CVE-2026-33594

CVE.ORG link : CVE-2026-33594


JSON object : View

Products Affected

powerdns

  • dnsdist
CWE
CWE-770

Allocation of Resources Without Limits or Throttling