What’s Vulnerable › Products
PowerDNS DNSdist vulnerabilities
31 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 27 published in the last 12 months.
Check whether your PowerDNS DNSdist version is affected
Latest PowerDNS DNSdist vulnerabilities
- CVE-2026-42004 — EDNS options smuggling (CVSS 3.7)
- CVE-2026-40211 — Denial of service via crafted DoH3 queries (CVSS 5.3)
- CVE-2026-40210 — Out-of-bounds read in SetMacAddrAction (CVSS 4.8)
- CVE-2026-40209 — Denial of service via IXFR queries (CVSS 5.3)
- CVE-2026-40208 — Denial of service via DoH3 queries (CVSS 3.7)
- CVE-2026-40011 — Prometheus denial of service via crafted DNS queries (CVSS 3.7)
- CVE-2026-33602 — Off-by-one access when processing crafted UDP responses (CVSS 8.2)
- CVE-2026-33599 — Out-of-bounds read in service discovery (CVSS 8.1)
- CVE-2026-33598 — Out-of-bounds read in cache inspection via Lua (CVSS 9.1)
- CVE-2026-33597 — PRSD detection denial of service (CVSS 7.5)
- CVE-2026-33596 — TCP backend stream ID overflow (CVSS 6.5)
- CVE-2026-33595 — DoQ/DoH3 excessive memory allocation (CVSS 7.5)
- CVE-2026-33594 — Outgoing DoH excessive memory allocation (CVSS 7.5)
- CVE-2026-33593 — Denial of service via crafted DNSCrypt query (CVSS 7.5)
- CVE-2026-33254 — Resource exhaustion via DoQ/DoH3 connections (CVSS 7.5)
- CVE-2026-33260 — Insufficient input validation of internal webserver (CVSS 7.5)
- CVE-2026-33257 — Insufficient input validation of internal webserver (CVSS 7.5)
- CVE-2026-27854 — Use after free when parsing EDNS options in Lua (CVSS 7.5)
- CVE-2026-27853 — Out-of-bounds write when rewriting large DNS packets (CVSS 7.5)
- CVE-2026-24030 — Unbounded memory allocation for DoQ and DoH3 (CVSS 7.5)
- CVE-2026-24029 — DNS over HTTPS ACL bypass (CVSS 6.5)
- CVE-2026-24028 — Out-of-bounds read when parsing DNS packets via Lua (CVSS 8.2)
- CVE-2026-0397 — Information disclosure via CORS misconfiguration (CVSS 4.3)
- CVE-2026-0396 — HTML injection in the web dashboard (CVSS 4.3)
- CVE-2025-30187 — Denial of service via crafted DoH exchange in PowerDNS DNSdist (CVSS 3.7)