CVE-2026-33595

A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly released until the end of the connection.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*

History

24 Apr 2026, 18:49

Type Values Removed Values Added
CPE cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
First Time Powerdns dnsdist
Powerdns
References () https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-04.html - () https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-04.html - Vendor Advisory

22 Apr 2026, 15:16

Type Values Removed Values Added
CWE CWE-770

22 Apr 2026, 14:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-04-22 14:16

Updated : 2026-04-24 18:49


NVD link : CVE-2026-33595

Mitre link : CVE-2026-33595

CVE.ORG link : CVE-2026-33595


JSON object : View

Products Affected

powerdns

  • dnsdist
CWE
CWE-770

Allocation of Resources Without Limits or Throttling