CLEANSTART-2024-OD86351 When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by ...

Security vulnerability affects the dnsdist package. When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer AXFR or IX...

DNSdist getEDNSOptions Method DoS

The vulnerability of the DNSQuestion:getEDNSOptions method in the pdns/dnsdistdist/dnsdist.hh file of the load balancer and proxy for DNS traffic is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

pdns/dnsdistdist/html/local.js Arbitrary HTML Injection

The vulnerability of the update function in the pdns/dnsdistdist/html/local.js file of the load balancer and proxy for DNS traffic is related to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTML code...

DNSdist PacketReader Function Disclosure DoS

The vulnerability of the PacketReader::skip function in the pdns/dnsparser.hh file of the load balancer and proxy for DNS traffic is related to the operation of pushing data out of the buffer into memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information ...

DNSdist DNS DoS

The vulnerability of the GenericDNSPacketWriter::commit function in the pdns/dnswriter.c file of the load balancer and proxy for DNS traffic is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failur...

dnsdist handleCORS() Unauthorized Access

The vulnerability of the handleCORS function in the pdns/dnsdistdist/dnsdist-web.cc load balancer and proxy for DNS traffic is related to the use of an untrusted domain policy file. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

DNSdist Bypass ACL

The vulnerability of the IncomingHTTP2Connection::handleIncomingQuery function in the pdns/dnsdistdist/dnsdist-nghttp2-in.cc file of the load balancer and proxy for DNS traffic is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor ...

ROS-20260812-73-0017

The vulnerability in dnsdist is related to an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

ROS-20260812-73-0018

The vulnerability in dnsdist relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

ROS-20260812-73-0019

The vulnerability in dnsdist relates to the failure to take measures to eliminate script-related HTML tags on web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

ROS-20260812-73-0016

The vulnerability in dnsdist is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20260812-73-0013

The vulnerability in dnsdist is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

ROS-20260812-73-0014

The vulnerability in dnsdist is related to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20260812-73-0015

The vulnerability in dnsdist relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

K000162871: PowerDNS DNSdist vulnerability CVE-2026-40211

Security Advisory Description An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3...

[SECURITY] [DSA 6419-1] dnsdist security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6419-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 08, 2026 https://www.debian.org/security/faq -...

Debian dsa-6419 : dnsdist - security update

The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6419 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6419-1 [email protected] https://www.debian.org/security/...

FreeBSD : DNSDist, PowerDNS, PowerDNS Recursor -- vulnerability (7e45952f-9268-11f1-ab2f-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7e45952f-9268-11f1-ab2f-3c7c3fba4204 advisory. CVE-2026-52682: A crafted DNS packet can cause increased memory and CPU consumption. Tenable has...

openSUSE 16 Security Update : dnsdist (openSUSE-SU-2026:21533-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21533-1 advisory. Update to 1.9.15. Changes for dnsdist: - https://www.dnsdist.org/changelog.htmlchange-1.9.15 - https://www.dnsdist.org/changelog.htmlchange-1.9....

Linux Distros Unpatched Vulnerability : CVE-2026-52682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CVE-2026-52682: A crafted DNS packet can cause increased memory and CPU consumption. CVE-2026-52682 Note that Nessus relies on the presence of the package as...