CVE-2026-33259 — Concurrent modification of RPZ data can lead to denial of servce

CVE-2026-33259

Concurrent modification of RPZ data can lead to denial of servce PUBLISHED

Description (CNA)

Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a crash of the recursor. Normally concurrent transfers of the same RPZ zone can only occur with a malfunctioning RPZ provider.

Affected (CNA)

Vendor / product	Versions
PowerDNS / Recursor	affected 5.4.0 before 5.4.1; affected 5.3.0 before 5.3.6; affected 5.2.0 before 5.2.9

CWE

No CWE identifiers supplied.

References

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-03.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.