CVE-2026-24028

A flaw was found in dnsdist and PowerDNS when custom Lua code uses newDNSPacketOverlay to parse DNS packets. A remote attacker could exploit this by sending a specially crafted DNS response packet, leading to an out-of-bounds read. This vulnerability might cause a system crash, resulting in a...