Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2026-33596

TCP backend stream ID overflow

Description

A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by sending a flood of perfectly timed queries that are routed to a TCP-only or DNS over TLS backend.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PowerDNS DNSdist

Default version status: unaffected

  • 1.9.0 to < 1.9.13affected
  • 2.0.0 to < 2.0.4affected

References