CVE-2026-33262

Опубликовано: 22 апр. 2026

Источник: nvd

CVSS3: 5.9

EPSS Низкий

Описание

An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default.

Ссылки

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-03.html
Broken Link
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*

Версия от 5.2.0 (включая) до 5.2.9 (исключая)

cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*

Версия от 5.3.0 (включая) до 5.3.6 (исключая)

cpe:2.3:a:powerdns:recursor:5.4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00418

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVE-2026-33262

CVSS3: 5.9

ubuntu

4 месяца назад

An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default.

CVE-2026-33262

CVSS3: 5.9

debian

4 месяца назад

An attacker can send replies that result in a null pointer dereference ...

GHSA-ghrj-5797-7659

CVSS3: 5.9

github

4 месяца назад

An attacker can send replies that result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service. Cookies are disabled by default.

EPSS

Процентиль: 35%

0.00418

Низкий

5.9 Medium

CVSS3

Дефекты

CWE-476