dnsdist vulnerabilities (Ubuntu)
39 vulnerabilities.
-
dnsdistUbuntu h2o: heap exhaustion using capsules 7.5 High -
dnsdistUbuntu h2o: buffer overflow when using the %{error}x log directive 8.1 High -
dnsdistUbuntu [A crafted DNS packet can cause increased memory and CPU consumption] No score -
dnsdistUbuntu h2o has HTTP/2 state amplification 7.5 High -
dnsdistUbuntu h2o is vulnerable to musl libc stack overflow 7.5 High -
dnsdistUbuntu h2o is vulnerable to heap overrun 5.9 Medium -
dnsdistUbuntu h2o: musl libc stack overflow (QPACK) 7.5 High -
dnsdistUbuntu EDNS options smuggling 3.7 Low -
dnsdistUbuntu Denial of service via crafted DoH3 queries 5.3 Medium -
dnsdistUbuntu Out-of-bounds read in SetMacAddrAction 4.8 Medium -
dnsdistUbuntu Denial of service via IXFR queries 5.3 Medium -
dnsdistUbuntu Denial of service via DoH3 queries 3.7 Low -
dnsdistUbuntu Prometheus denial of service via crafted DNS queries 3.7 Low -
dnsdistUbuntu Insufficient input validation of internal web server 4.3 Medium -
dnsdistUbuntu Denial of service via crafted DNSCrypt query 7.5 High -
dnsdistUbuntu Outgoing DoH excessive memory allocation 5.3 Medium -
dnsdistUbuntu DoQ/DoH3 excessive memory allocation 5.3 Medium -
dnsdistUbuntu PRSD detection denial of service 3.7 Low -
dnsdistUbuntu TCP backend stream ID overflow 3.1 Low -
dnsdistUbuntu Out-of-bounds read in cache inspection via Lua 4.8 Medium -
dnsdistUbuntu Out-of-bounds read in service discovery 3.1 Low -
dnsdistUbuntu Off-by-one access when processing crafted UDP responses 6.5 Medium -
dnsdistUbuntu Resource exhaustion via DoQ/DoH3 connections 5.3 Medium -
dnsdistUbuntu Insufficient input validation of internal webserver 5.3 Medium -
dnsdistUbuntu Insufficient input validation of internal webserver 5.3 Medium -
dnsdistUbuntu Use after free when parsing EDNS options in Lua 4.8 Medium -
dnsdistUbuntu Out-of-bounds write when rewriting large DNS packets 5.9 Medium -
dnsdistUbuntu Unbounded memory allocation for DoQ and DoH3 5.3 Medium -
dnsdistUbuntu DNS over HTTPS ACL bypass 6.5 Medium -
dnsdistUbuntu Out-of-bounds read when parsing DNS packets via Lua 5.3 Medium -
dnsdistUbuntu Information disclosure via CORS misconfiguration 3.1 Low -
dnsdistUbuntu HTML injection in the web dashboard 3.1 Low -
dnsdistUbuntu Denial of service via crafted DoH exchange in PowerDNS DNSdist 3.7 Low -
dnsdistUbuntu CVE-2025-8671 7.5 High -
dnsdistUbuntu Denial of service via crafted TCP exchange 7.5 High -
dnsdistUbuntu Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
dnsdistUbuntu An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a... 5.9 Medium -
dnsdistUbuntu An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when... 5.9 Medium -
dnsdistUbuntu dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API... 8.8 High