Incomplete domain name sanitization during (CVE-2026-33608)

Summary

Incomplete domain name sanitization during

Original description

The description as published by the source.

An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an invalid one, leading to the backend no longer able to run on the next restart, requiring manual operation to fix it.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2026-33608 pdns
Ubuntu UBUNTU-CVE-2026-33608 pdns

References

advisory docs.powerdns.com
advisory github.com
advisory nvd.nist.gov
package github.com
web repo.powerdns.com