dnsdist vulnerabilities (Debian)
34 vulnerabilities.
-
dnsdistDebian [A crafted DNS packet can cause increased memory and CPU consumption] No score -
dnsdistDebian EDNS options smuggling 3.7 Low -
dnsdistDebian Denial of service via crafted DoH3 queries 5.3 Medium -
dnsdistDebian Out-of-bounds read in SetMacAddrAction 4.8 Medium -
dnsdistDebian Denial of service via IXFR queries 5.3 Medium -
dnsdistDebian Denial of service via DoH3 queries 3.7 Low -
dnsdistDebian Prometheus denial of service via crafted DNS queries 3.7 Low -
dnsdistDebian Insufficient input validation of internal web server 4.3 Medium -
dnsdistDebian Denial of service via crafted DNSCrypt query 7.5 High -
dnsdistDebian Outgoing DoH excessive memory allocation 5.3 Medium -
dnsdistDebian DoQ/DoH3 excessive memory allocation 5.3 Medium -
dnsdistDebian PRSD detection denial of service 3.7 Low -
dnsdistDebian TCP backend stream ID overflow 3.1 Low -
dnsdistDebian Out-of-bounds read in cache inspection via Lua 4.8 Medium -
dnsdistDebian Out-of-bounds read in service discovery 3.1 Low -
dnsdistDebian Off-by-one access when processing crafted UDP responses 6.5 Medium -
dnsdistDebian Resource exhaustion via DoQ/DoH3 connections 5.3 Medium -
dnsdistDebian Insufficient input validation of internal webserver 5.3 Medium -
dnsdistDebian Insufficient input validation of internal webserver 5.3 Medium -
dnsdistDebian Use after free when parsing EDNS options in Lua 4.8 Medium -
dnsdistDebian Out-of-bounds write when rewriting large DNS packets 5.9 Medium -
dnsdistDebian Unbounded memory allocation for DoQ and DoH3 5.3 Medium -
dnsdistDebian DNS over HTTPS ACL bypass 6.5 Medium -
dnsdistDebian Out-of-bounds read when parsing DNS packets via Lua 5.3 Medium -
dnsdistDebian Information disclosure via CORS misconfiguration 3.1 Low -
dnsdistDebian HTML injection in the web dashboard 3.1 Low -
dnsdistDebian Denial of service via crafted DoH exchange in PowerDNS DNSdist 3.7 Low -
dnsdistDebian Denial of service via crafted TCP exchange 7.5 High -
dnsdistDebian Denial of service via crafted DoH exchange 7.5 High -
dnsdistDebian Transfer requests received over DoH can lead to a denial of service in DNSdist 7.5 High -
dnsdistDebian Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
dnsdistDebian An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a... 5.9 Medium -
dnsdistDebian An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when... 5.9 Medium -
dnsdistDebian dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API... 8.8 High