Out-of-Bounds Write Vulnerability Affecting PowerDNS Product

CVE-2026-33602

What is CVE-2026-33602?

A vulnerability exists within PowerDNS that allows an attacker with a rogue backend to exploit a crafted UDP response. This response may contain a query ID that is offset by one in relation to the maximum set value, triggering an out-of-bounds write. This condition can lead to unintended behaviors, including potential denial of service, affecting system availability and reliability.

References