CVE-2026-33602Disclosure(powerdns / dnsdist)

LOWCVSS 8.2 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a denial of service.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • dnsdist

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
dnsdist

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-22: 2Technical Details · 2026-04-22: 104-22
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-33602 A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a den… https://www.cve.org/CVERecord?id=CVE-2026-33602

    Post summary

    CVE-2026-33602 is disclosed as an out-of-bounds write vulnerability arising from a crafted UDP response; no PoC, exploit code, active exploitation, or patch information is provided.

    00000134
    57.2K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-33602 Out-of-Bounds Write Denial of Service via Crafted UDP Response Query ID https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33602

    Post summary

    The entry briefly announces CVE‑2026‑33602 as an out‑of‑bounds write leading to a denial‑of‑service, with no information on exploitation, patches, or detailed technical data.

    0000042
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apppowerdnsdnsdist---

Explore more