CVE-2026-0398
Awaiting Analysis Awaiting Analysis - Queue

Resource Exhaustion and Cache Poisoning in Recursor DNS

Publication date: 2026-02-09

Last updated on: 2026-04-20

Assigner: Open-Xchange

Description
Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-02-09
Last Modified
2026-04-20
Generated
2026-07-06
AI Q&A
2026-02-09
EPSS Evaluated
2026-07-05
NVD
CVE-2026-0398
EUVD
EUVD-2026-6923

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
powerdns recursor From 5.1.0 (inc) to 5.1.10 (exc)
powerdns recursor From 5.2.8 (inc) to 5.2.8 (exc)
powerdns recursor From 5.3.0 (inc) to 5.3.5 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves crafted DNS zones and CNAME chains in the Recursor component. Specifically, specially crafted zones can cause increased resource usage, which may degrade performance or availability. Additionally, crafted CNAME chains can lead to cache poisoning, a type of attack where incorrect DNS information is cached, potentially redirecting users to malicious sites.

Impact Analysis

The vulnerability can impact you by causing increased resource consumption on DNS recursor services, potentially leading to degraded performance or denial of service. Furthermore, cache poisoning through crafted CNAME chains can redirect users to malicious destinations, posing security risks such as phishing or malware distribution.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-0398. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart