CVE-2026-0398: Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor
Published Feb 9, 2026
·Updated
Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor.
Affected Software
3 affected components
PowerDNS recursor>=5.1.0<5.1.10
PowerDNS recursor>=5.2.8<5.2.8
PowerDNS recursor>=5.3.0<5.3.5
Event History
Feb 9, 2026
CVE Published
via MITRE·02:20 PM
Data Sourced
via MITRE·02:20 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-0398?
CVE-2026-0398 has a moderate severity rating due to its potential for increased resource usage and cache poisoning.
2
How do I fix CVE-2026-0398?
To fix CVE-2026-0398, upgrade PowerDNS Recursor to version 5.1.10 or later, or to version 5.2.9 or later.
3
What versions of PowerDNS are affected by CVE-2026-0398?
CVE-2026-0398 affects PowerDNS Recursor versions from 5.1.0 to 5.1.10 and all versions of 5.2.8 and 5.3.5.
4
What risks are associated with CVE-2026-0398?
The risks associated with CVE-2026-0398 include increased resource usage and the possibility of cache poisoning attacks.
5
Is there a permanent patch for CVE-2026-0398?
Yes, the permanent fix for CVE-2026-0398 is included in the updated versions of PowerDNS Recursor released after the vulnerability was disclosed.