Powerdns Dnsdist vulnerabilities

• powerdns dnsdist EDNS options smuggling CVE-2026-42004 Fix available 3.7 LowJune 25, 2026
• powerdns dnsdist Denial of service via crafted DoH3 queries CVE-2026-40211 Fix available 5.3 MediumJune 25, 2026
• powerdns dnsdist Out-of-bounds read in SetMacAddrAction CVE-2026-40210 Fix available 4.8 MediumJune 25, 2026
• powerdns dnsdist Denial of service via IXFR queries CVE-2026-40209 Fix available 5.3 MediumJune 25, 2026
• powerdns dnsdist Denial of service via DoH3 queries CVE-2026-40208 Fix available 3.7 LowJune 25, 2026
• powerdns dnsdist Prometheus denial of service via crafted DNS queries CVE-2026-40011 Fix available 3.7 LowJune 25, 2026
• powerdns dnsdist Denial of service via crafted DNSCrypt query CVE-2026-33593 Fix available 7.5 HighApril 22, 2026
• powerdns dnsdist Outgoing DoH excessive memory allocation CVE-2026-33594 Fix available 5.3 MediumApril 22, 2026
• powerdns dnsdist DoQ/DoH3 excessive memory allocation CVE-2026-33595 Fix available 5.3 MediumApril 22, 2026
• powerdns dnsdist PRSD detection denial of service CVE-2026-33597 Fix available 3.7 LowApril 22, 2026
• powerdns dnsdist TCP backend stream ID overflow CVE-2026-33596 Fix available 3.1 LowApril 22, 2026
• powerdns dnsdist Out-of-bounds read in cache inspection via Lua CVE-2026-33598 Fix available 4.8 MediumApril 22, 2026
• powerdns dnsdist Out-of-bounds read in service discovery CVE-2026-33599 Fix available 3.1 LowApril 22, 2026
• powerdns dnsdist Off-by-one access when processing crafted UDP responses CVE-2026-33602 Fix available 6.5 MediumApril 22, 2026
• powerdns dnsdist Resource exhaustion via DoQ/DoH3 connections CVE-2026-33254 Fix available 5.3 MediumApril 22, 2026
• powerdns authoritative, dnsdist, recursor +2 more Insufficient input validation of internal webserver CVE-2026-33260 Fix available 5.3 MediumApril 22, 2026
• powerdns authoritative, dnsdist, recursor +2 more Insufficient input validation of internal webserver CVE-2026-33257 Fix available 5.3 MediumApril 22, 2026
• powerdns dnsdist Use after free when parsing EDNS options in Lua CVE-2026-27854 Fix available 4.8 MediumMarch 31, 2026
• powerdns dnsdist Out-of-bounds write when rewriting large DNS packets CVE-2026-27853 Fix available 5.9 MediumMarch 31, 2026
• powerdns dnsdist Unbounded memory allocation for DoQ and DoH3 CVE-2026-24030 Fix available 5.3 MediumMarch 31, 2026
• powerdns dnsdist DNS over HTTPS ACL bypass CVE-2026-24029 Fix available 6.5 MediumMarch 31, 2026
• powerdns dnsdist Out-of-bounds read when parsing DNS packets via Lua CVE-2026-24028 Fix available 5.3 MediumMarch 31, 2026
• powerdns dnsdist Information disclosure via CORS misconfiguration CVE-2026-0397 Fix available 3.1 LowMarch 31, 2026
• powerdns dnsdist HTML injection in the web dashboard CVE-2026-0396 Fix available 3.1 LowMarch 31, 2026
• powerdns dnsdist Denial of service via crafted DoH exchange in PowerDNS DNSdist CVE-2025-30187 Fix available 3.7 LowSeptember 18, 2025
• powerdns dnsdist Denial of service via crafted TCP exchange CVE-2025-30193 Fix available 7.5 HighMay 20, 2025
• powerdns dnsdist Denial of service via crafted DoH exchange CVE-2025-30194 Fix available 7.5 HighApril 29, 2025
• powerdns dnsdist Transfer requests received over DoH can lead to a denial of service in DNSdist CVE-2024-25581 Fix available 7.5 HighMay 13, 2024
• [unknown] dnsdist An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a... CVE-2018-14663 Fix available 5.9 MediumNovember 26, 2018
• open-xchange dnsdist An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when... CVE-2016-7069 Fix available 5.9 MediumSeptember 11, 2018
• powerdns dnsdist dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API... CVE-2017-7557 Fix available 8.8 HighAugust 22, 2017