Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-40012

Information about ECS zero scoped answers might leak to clients that use a specific ECS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OX

Description

ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled;

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PowerDNS Recursor

Default version status: unaffected

  • 5.2.0 to < 5.2.11affected
  • 5.3.0 to < 5.3.8affected
  • 5.4.0 to < 5.4.3affected

References