CVE-2026-33600: Null pointer dereference in RPZ transfer
An RPZ sent by a malicious authoritative server can result in a null pointer dereference, caused by a missing consistency check and leading to a denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/pdns-recursorto a version that resolves this vulnerability.Fixed in 5.3.6-r0 - Upgrade
Upgrade
alpine/pdns-recursorto a version that resolves this vulnerability.Fixed in 5.4.1-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-33600?
The severity of CVE-2026-33600 is classified as critical due to the potential for denial of service.
How do I fix CVE-2026-33600?
To fix CVE-2026-33600, upgrade to the latest version of ISC BIND that addresses this vulnerability.
What causes the vulnerability CVE-2026-33600?
CVE-2026-33600 is caused by a null pointer dereference due to a missing consistency check in RPZ transfer.
What systems are affected by CVE-2026-33600?
CVE-2026-33600 primarily affects ISC BIND DNS software.
What are the potential impacts of CVE-2026-33600?
The potential impacts of CVE-2026-33600 include a denial of service, affecting the availability of DNS services.