DN
Product
DNSdist
27
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 15Medium 8Low 3
Watch
Add DNSdist to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33598 | 9.1 | Apr 22 | Out-of-bounds read in cache inspection via Lua Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2017-7557 | 8.8 | Aug 22 | dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack Affected: 1.1.0 |
| CVE-2026-33602 | 8.2 | Apr 22 | Off-by-one access when processing crafted UDP responses Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-24028 | 8.2 | Mar 31 | Out-of-bounds read when parsing DNS packets via Lua Affected: 1.9.0 before 1.9.12; 2.0.0 before 2.0.3 |
| CVE-2026-33599 | 8.1 | Apr 22 | Out-of-bounds read in service discovery Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33593 | 7.5 | Apr 22 | Denial of service via crafted DNSCrypt query Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33594 | 7.5 | Apr 22 | Outgoing DoH excessive memory allocation Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33595 | 7.5 | Apr 22 | DoQ/DoH3 excessive memory allocation Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33597 | 7.5 | Apr 22 | PRSD detection denial of service Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33254 | 7.5 | Apr 22 | Resource exhaustion via DoQ/DoH3 connections Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33260 | 7.5 | Apr 22 | Insufficient input validation of internal webserver Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33257 | 7.5 | Apr 22 | Insufficient input validation of internal webserver Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-27854 | 7.5 | Mar 31 | Use after free when parsing EDNS options in Lua Affected: 1.9.0 before 1.9.12; 2.0.0 before 2.0.3 |
| CVE-2026-27853 | 7.5 | Mar 31 | Out-of-bounds write when rewriting large DNS packets Affected: 1.9.0 before 1.9.12; 2.0.0 before 2.0.3 |
| CVE-2026-24030 | 7.5 | Mar 31 | Unbounded memory allocation for DoQ and DoH3 Affected: 1.9.0 before 1.9.12; 2.0.0 before 2.0.3 |
| CVE-2016-7069 | 7.5 | Sep 11 | An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend Affected: through 1.2.0 |
| CVE-2026-33596 | 6.5 | Apr 22 | TCP backend stream ID overflow Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-24029 | 6.5 | Mar 31 | DNS over HTTPS ACL bypass Affected: 1.9.0 before 1.9.12; 2.0.0 before 2.0.3 |
| CVE-2018-14663 | 5.9 | Nov 26 | An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing data such that the addition of a record by dnsdist, for… Affected: through 1.3.2 |
| CVE-2026-40211 | 5.3 | Jun 25 | Denial of service via crafted DoH3 queries Affected: 1.9.0 before 1.9.15; 2.0.0 before 2.0.7 |
| CVE-2026-40209 | 5.3 | Jun 25 | Denial of service via IXFR queries Affected: 1.9.0 before 1.9.15; 2.0.0 before 2.0.7 |
| CVE-2026-40210 | 4.8 | Jun 25 | Out-of-bounds read in SetMacAddrAction Affected: 1.9.0 before 1.9.15; 2.0.0 before 2.0.7 |
| CVE-2026-0397 | 4.3 | Mar 31 | Information disclosure via CORS misconfiguration Affected: 1.9.0 before 1.9.12; 2.0.0 before 2.0.3 |
| CVE-2026-0396 | 4.3 | Mar 31 | HTML injection in the web dashboard Affected: 1.9.0 before 1.9.12; 2.0.0 before 2.0.3 |
| CVE-2026-42004 | 3.7 | Jun 25 | EDNS options smuggling Affected: 1.9.0 before 1.9.15; 2.0.0 before 2.0.7 |
| CVE-2026-40208 | 3.7 | Jun 25 | Denial of service via DoH3 queries Affected: 1.9.0 before 1.9.15; 2.0.0 before 2.0.7 |
| CVE-2026-40011 | 3.7 | Jun 25 | Prometheus denial of service via crafted DNS queries Affected: 1.9.0 before 1.9.15; 2.0.0 before 2.0.7 |
Showing 27