PowerDNS DNSdist

• CVE-2026-42004 Low 3.7 EDNS options smuggling 0.2%
• CVE-2026-40211 Medium 5.3 Denial of service via crafted DoH3 queries 0.7%
• CVE-2026-40210 Medium 4.8 Out-of-bounds read in SetMacAddrAction 0.7%
• CVE-2026-40209 Medium 5.3 Denial of service via IXFR queries 0.7%
• CVE-2026-40208 Low 3.7 Denial of service via DoH3 queries 0.4%
• CVE-2026-40011 Low 3.7 Prometheus denial of service via crafted DNS queries 0.2%
• CVE-2026-33593 High 7.5 Denial of service via crafted DNSCrypt query 0.4%
• CVE-2026-33594 Medium 5.3 Outgoing DoH excessive memory allocation 0.4%
• CVE-2026-33595 Medium 5.3 DoQ/DoH3 excessive memory allocation 0.4%
• CVE-2026-33597 Low 3.7 PRSD detection denial of service 0.3%
• CVE-2026-33596 Low 3.1 TCP backend stream ID overflow 0.2%
• CVE-2026-33598 Medium 4.8 Out-of-bounds read in cache inspection via Lua 1.1%
• CVE-2026-33599 Low 3.1 Out-of-bounds read in service discovery 0.3%
• CVE-2026-33602 Medium 6.5 Off-by-one access when processing crafted UDP responses 0.7%
• CVE-2026-33254 Medium 5.3 Resource exhaustion via DoQ/DoH3 connections 0.4%
• CVE-2026-33260 Medium 5.3 Insufficient input validation of internal webserver 0.5%
• CVE-2026-33257 Medium 5.3 Insufficient input validation of internal webserver 0.5%
• CVE-2026-27854 Medium 4.8 Use after free when parsing EDNS options in Lua 0.5%
• CVE-2026-27853 Medium 5.9 Out-of-bounds write when rewriting large DNS packets 0.5%
• CVE-2026-24030 Medium 5.3 Unbounded memory allocation for DoQ and DoH3 0.6%
• CVE-2026-24029 Medium 6.5 DNS over HTTPS ACL bypass 0.2%
• CVE-2026-24028 Medium 5.3 Out-of-bounds read when parsing DNS packets via Lua 1.1%
• CVE-2026-0397 Low 3.1 Information disclosure via CORS misconfiguration 0.2%
• CVE-2026-0396 Low 3.1 HTML injection in the web dashboard 0.1%
• CVE-2025-30187 Low 3.7 Denial of service via crafted DoH exchange in PowerDNS DNSdist 0.3%
• CVE-2025-30193 High 7.5 Denial of service via crafted TCP exchange 0.6%
• CVE-2025-30194 High 7.5 Denial of service via crafted DoH exchange 2.3%
• CVE-2024-25581 High 7.5 Transfer requests received over DoH can lead to a denial of service in DNSdist 1.1%