Home

Description

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor.

PUBLISHED Reserved 2025-11-28 | Published 2026-02-09 | Updated 2026-02-09 | Assigner OX




MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Problem types

Allocation of Resources Without Limits or Throttling

Product status

Default status
unaffected

5.3.0 (semver) before 5.3.5
affected

5.2.0 (semver) before 5.2.8
affected

5.1.0 (semver) before 5.1.10
affected

Credits

Yufan You from Tsinghua University finder

TaoFei Guo from Peking University finder

Yang Luo from Tsinghua University finder

JianJun Chen from Tsinghua University finder

References

docs.powerdns.com/...visories/powerdns-advisory-2026-01.html

cve.org (CVE-2026-0398)

nvd.nist.gov (CVE-2026-0398)

Download JSON