CVE-2026-33612: falha de alta gravidade em PowerDNS Recursor
ZoneToCache can poison the cache
Publicada em
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.1%
probabilidade de exploração
0.1%top 96% das CVEs
exploração observada
nãonenhuma fonte reporta
A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L
Produtos afetados
PowerDNS · RecursorCVEs relacionadas — PowerDNS Recursor
No mesmo produto, das mais perigosas para as menos.
CVE-2026-33260MEDIUMInsufficient input validation of internal webserverEPSS 1.1%CVE-2026-33257MEDIUMInsufficient input validation of internal webserverEPSS 1.1%CVE-2024-25583HIGHCrafted responses can lead to a denial of service in Recursor if recursive forwarding is configuredEPSS 0.8%CVE-2026-33258MEDIUMCrafted zones can cause increased resource usageEPSS 0.8%CVE-2026-33256MEDIUMUnbounded memory allocation by internal web serverEPSS 0.8%CVE-2025-30195HIGHA crafted zone can lead to an illegal memory access in the PowerDNS RecursorEPSS 0.8%