ROS-20260812-73-0016

The vulnerability in dnsdist is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20260812-73-0018

The vulnerability in dnsdist relates to the use of an untrusted intermediate policy file. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

ROS-20260812-73-0019

The vulnerability in dnsdist relates to the failure to take measures to eliminate script-related HTML tags on web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

ROS-20260812-73-0017

The vulnerability in dnsdist is related to an operation that occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

ROS-20260812-73-0015

The vulnerability in dnsdist relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260812-73-0013

The vulnerability in dnsdist is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

ROS-20260812-73-0014

The vulnerability in dnsdist is related to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

K000162871: PowerDNS DNSdist vulnerability CVE-2026-40211

Security Advisory Description An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3...

openSUSE 16 Security Update : dnsdist (openSUSE-SU-2026:21533-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21533-1 advisory. Update to 1.9.15. Changes for dnsdist: - https://www.dnsdist.org/changelog.htmlchange-1.9.15 - https://www.dnsdist.org/changelog.htmlchange-1.9....

Linux Distros Unpatched Vulnerability : CVE-2026-52682

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CVE-2026-52682: A crafted DNS packet can cause increased memory and CPU consumption. CVE-2026-52682 Note that Nessus relies on the presence of the package as...

Security update for dnsdist (important)

openSUSE security update: security update for dnsdist ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21533-1 Rating: important References: bsc1269201 bsc1269202 bsc1269203 bsc1269204 bsc1269205 bsc1269206 bsc1269207 Cross-References: CVE-2026-40011...

SUSE-SU-2026:23123-1 Security update for dnsdist

This update for dnsdist fixes the following issues: Update to 1.9.15. Changes for dnsdist: - https://www.dnsdist.org/changelog.htmlchange-1.9.15 - https://www.dnsdist.org/changelog.htmlchange-1.9.14 Security issues fixed: - CVE-2026-40011: invalid output produced in the prometheus endpoint when a...

SUSE-SU-2026:23146-1 Security update for dnsdist

This update for dnsdist fixes the following issues: Update to 1.9.15. Changes for dnsdist: - https://www.dnsdist.org/changelog.htmlchange-1.9.15 - https://www.dnsdist.org/changelog.htmlchange-1.9.14 Security issues fixed: - CVE-2026-40011: invalid output produced in the prometheus endpoint when a...

OPENSUSE-SU-2026:21533-1 Security update for dnsdist

This update for dnsdist fixes the following issues: Update to 1.9.15. Changes for dnsdist: - https://www.dnsdist.org/changelog.htmlchange-1.9.15 - https://www.dnsdist.org/changelog.htmlchange-1.9.14 Security issues fixed: - CVE-2026-40011: invalid output produced in the prometheus endpoint when a...

dnsdist-2.0.7-1.1 on GA media (moderate)

dnsdist-2.0.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:11411-1 Rating: moderate Cross-References: CVE-2026-40011 CVE-2026-40208 CVE-2026-40209 CVE-2026-40210 CVE-2026-40211 CVE-2026-42004 CVE-2026-42005 CVSS scores: CVE-2026-40011 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N...

OPENSUSE-SU-2026:11411-1 dnsdist-2.0.7-1.1 on GA media

These are all security issues fixed in the dnsdist-2.0.7-1.1 package on the GA media of openSUSE Tumbleweed...

DNSDist, PowerDNS, PowerDNS Recursor -- vulnerability

CVE-2026-52682: A crafted DNS packet can cause increased memory and CPU consumption...

Security update for dnsdist (moderate)

openSUSE security update: security update for dnsdist ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21015-1 Rating: moderate References: bsc1261236 bsc1261237 bsc1261238 bsc1261239 bsc1261240 bsc1261241 bsc1261243 bsc1262536 bsc1262537 bsc1262538...

FreeBSD : DNSdist -- vulnerabilities (6c0e17cf-73a0-11f1-910d-3c7c3fba4204)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6c0e17cf-73a0-11f1-910d-3c7c3fba4204 advisory. The DNSdist team reports: Thanks to people below for reporting these vulnerabilities. Tenable...

SUSE CVE-2026-42004

An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist's filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS options that DNSdist did not filter...