CVE-2026-33610

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:powerdns:authoritative:*:*:*:*:*:*:*:*
cpe:2.3:a:powerdns:authoritative:*:*:*:*:*:*:*:*

History

24 Apr 2026, 18:53

Type Values Removed Values Added
First Time Powerdns
Powerdns authoritative
References () https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-05.html - () https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-05.html - Broken Link, Vendor Advisory
CPE cpe:2.3:a:powerdns:authoritative:*:*:*:*:*:*:*:*

22 Apr 2026, 15:16

Type Values Removed Values Added
CWE CWE-400

22 Apr 2026, 14:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-04-22 14:16

Updated : 2026-04-24 18:53


NVD link : CVE-2026-33610

Mitre link : CVE-2026-33610

CVE.ORG link : CVE-2026-33610


JSON object : View

Products Affected

powerdns

  • authoritative
CWE
CWE-400

Uncontrolled Resource Consumption