Out-of-Bounds Read Vulnerability in PowerDNS

CVE-2026-33598

What is CVE-2026-33598?

A vulnerability exists in PowerDNS that allows an out-of-bounds read condition when custom Lua code calls specific functions like getDomainListByAddress() or getAddressListByDomain() on a packet cache. This loophole could potentially lead to unauthorized data access, posing risks to the confidentiality and integrity of the affected systems. Users must ensure their installations are updated and review their Lua scripts to mitigate any associated risks.

References