← back
CVE-2026-33601

Insufficient validation of zonemd record

CVSS 4.4 MEDIUMEPSS 0.5%CWE-476
If you use the zoneToCache function with a malicious authoritative server, an attacker can send a zone that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected products
PowerDNS · Recursor

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →