CVE-2026-33261

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-33261

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-33261.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-33261

Downstream

Published

2026-04-22T09:40:03Z

Modified

2026-10-22T07:21:50Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Null pointer accces in aggressive NSEC(3) cache

Details

A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service.

Database specific

{
    "cna_assigner":  "OX",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33261.json"
}

References

Affected packages

Git / github.com/powerdns/pdns

Affected ranges

Type

GIT

Repo

https://github.com/powerdns/pdns

Events

Introduced

c95adbda8ce519923dfdbe7947d82a2692e18af9

Fixed

9a49123aab87ac1ed9fa82c99af9542295db3ea7

Introduced

ff33413345dc6a826ff0f37f0c78cd60cdf15689

Fixed

1d377042e08ae8843834f572882cf5e7933779a0

Introduced

544037cd123e8662877b5dc0b7963f5a094a2faf

Fixed

b297bb729c002bc715a362fb0dd953e581c9055b

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "5.4.0"
                },
                {
                    "fixed":  "5.4.1"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        },
        {
            "range":  [
                {
                    "introduced":  "5.3.0"
                },
                {
                    "fixed":  "5.3.6"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        },
        {
            "range":  [
                {
                    "introduced":  "5.2.0"
                },
                {
                    "fixed":  "5.2.9"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        }
    ]
}

Affected versions

rec-5.*

rec-5.2.0

rec-5.2.2

rec-5.2.4

rec-5.2.5

rec-5.2.6

rec-5.2.8

rec-5.3.0

rec-5.3.1

rec-5.3.4

rec-5.4.0

rec-5.4.0-rc1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-33261.json"

vanir_signatures

[
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "33636427126868987742038567987628249565",
                "243165115013918776477950821480396248414",
                "111577468158352836947769972399358058880",
                "135142768426698932059790194916613969205"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-33261-555964a5",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/powerdns/pdns/commit/9a49123aab87ac1ed9fa82c99af9542295db3ea7",
        "target":  {
            "file":  "pdns/recursordist/rpzloader.cc"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "267164273993890695462681232822702173228",
                "254147238750497149020354176624768531180",
                "111833849558877957770686629013387565768",
                "172795771022719102256161942256088786852",
                "116846252582779990294504138599689757229",
                "132209276398926440573610110361447772713"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-33261-95ede998",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/powerdns/pdns/commit/1d377042e08ae8843834f572882cf5e7933779a0",
        "target":  {
            "file":  "pdns/recursordist/rpzloader.cc"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "267164273993890695462681232822702173228",
                "254147238750497149020354176624768531180",
                "111833849558877957770686629013387565768",
                "172795771022719102256161942256088786852",
                "116846252582779990294504138599689757229",
                "132209276398926440573610110361447772713"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2026-33261-eff8fcee",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/powerdns/pdns/commit/b297bb729c002bc715a362fb0dd953e581c9055b",
        "target":  {
            "file":  "pdns/recursordist/rpzloader.cc"
        }
    }
]

vanir_signatures_modified

"2026-10-22T07:21:50Z"