Excessive Memory Allocation Vulnerability in PowerDNS DoQ and DoH3

CVE-2026-33595

What is CVE-2026-33595?

PowerDNS Recursor is susceptible to a vulnerability that allows a client to trigger excessive memory allocation by generating multiple error responses over a single DoQ or DoH3 connection. This issue arises because certain resources are not properly released until the connection is terminated, potentially leading to degraded performance or denial of service. It is crucial for users to implement appropriate mitigation strategies to safeguard their services against this vulnerability.

References