Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2026-33262

Insufficient validation of cookie reply

Description

An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PowerDNS Recursor

Default version status: unaffected

  • 5.4.0 to < 5.4.1affected
  • 5.3.0 to < 5.3.6affected
  • 5.2.0 to < 5.2.9affected

References