CVE-2026-33598

Published: Apr 22, 2026Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

A cached crafted response can cause an out-of-bounds read if custom Lua code calls getDomainListByAddress() or getAddressListByDomain() on a packet cache.

Affected (2)

Products: Powerdns: Dnsdist

Powerdns

1 product

Dnsdist

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Powerdns Dnsdist	From 1.9.0 to 1.9.13
Powerdns Dnsdist	From 2.0.0 to 2.0.4

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (1)

https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-04.html

Source: security@open-xchange.com

Vendor Advisory

Timeline

No history available yet.