DN
Product
DNSdist
28
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 15Medium 8Low 4
Watch
Add DNSdist to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7557 | 8.8 | Aug 22 | dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack Affected: 1.1.0 |
| CVE-2026-33602 | 8.2 | Apr 22 | Off-by-one access when processing crafted UDP responses Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-24028 | 8.2 | Mar 31 | Out-of-bounds read when parsing DNS packets via Lua Affected: 1.9.0 before 1.9.12; 2.0.0 before 2.0.3 |
| CVE-2026-33599 | 8.1 | Apr 22 | Out-of-bounds read in service discovery Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33593 | 7.5 | Apr 22 | Denial of service via crafted DNSCrypt query Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33594 | 7.5 | Apr 22 | Outgoing DoH excessive memory allocation Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33595 | 7.5 | Apr 22 | DoQ/DoH3 excessive memory allocation Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33597 | 7.5 | Apr 22 | PRSD detection denial of service Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33254 | 7.5 | Apr 22 | Resource exhaustion via DoQ/DoH3 connections Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33260 | 7.5 | Apr 22 | Insufficient input validation of internal webserver Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-33257 | 7.5 | Apr 22 | Insufficient input validation of internal webserver Affected: 1.9.0 before 1.9.13; 2.0.0 before 2.0.4 |
| CVE-2026-27854 | 7.5 | Mar 31 | Use after free when parsing EDNS options in Lua Affected: 1.9.0 before 1.9.12; 2.0.0 before 2.0.3 |
| CVE-2026-27853 | 7.5 | Mar 31 | Out-of-bounds write when rewriting large DNS packets Affected: 1.9.0 before 1.9.12; 2.0.0 before 2.0.3 |
| CVE-2026-24030 | 7.5 | Mar 31 | Unbounded memory allocation for DoQ and DoH3 Affected: 1.9.0 before 1.9.12; 2.0.0 before 2.0.3 |
| CVE-2016-7069 | 7.5 | Sep 11 | An issue has been found in dnsdist before 1.2.0 in the way EDNS0 OPT records are handled when parsing responses from a backend Affected: through 1.2.0 |
Showing 15