Findings

CVE-2026-33595

A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly rel…

Published Apr 22, 2026 · updated Jun 17, 2026 · powerdns dnsdist

A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly released until the end of the connection.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 22, 2026 · NIST NVD

    Detected

    A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly released until the end of the connection.

  2. Jun 17, 2026 · NIST NVD

    Updated

    A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly released until the end of the connection.

Affected

  • cpe powerdns/dnsdistversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-33595

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-33595

    A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly released until the end of the connection.

    nvd.nist.gov

References

CVE-2026-33595 · ZeroDay Findings