# PowerDNS DNSdist.

Every CVE that names PowerDNS DNSdist among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [EDNS options smuggling](https://agentprime.io/advisories/CVE-2026-42004.md)
  `CVE-2026-42004` · CVE record: PowerDNS DNSdist · CVSS 3.7 Low · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-115
- [Denial of service via crafted DoH3 queries](https://agentprime.io/advisories/CVE-2026-40211.md)
  `CVE-2026-40211` · CVE record: PowerDNS DNSdist · CVSS 5.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Denial of service
- [Out-of-bounds read in SetMacAddrAction](https://agentprime.io/advisories/CVE-2026-40210.md)
  `CVE-2026-40210` · CVE record: PowerDNS DNSdist · CVSS 4.8 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-126
- [Denial of service via IXFR queries](https://agentprime.io/advisories/CVE-2026-40209.md)
  `CVE-2026-40209` · CVE record: PowerDNS DNSdist · CVSS 5.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Denial of service
- [Denial of service via DoH3 queries](https://agentprime.io/advisories/CVE-2026-40208.md)
  `CVE-2026-40208` · CVE record: PowerDNS DNSdist · CVSS 3.7 Low · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-705
- [Prometheus denial of service via crafted DNS queries](https://agentprime.io/advisories/CVE-2026-40011.md)
  `CVE-2026-40011` · CVE record: PowerDNS DNSdist · CVSS 3.7 Low · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-116
- [Denial of service via crafted DNSCrypt query](https://agentprime.io/advisories/CVE-2026-33593.md)
  `CVE-2026-33593` · CVE record: PowerDNS DNSdist · CVSS 7.5 High · Not analysed yet · Published 22 Apr 2026 · Tags: Denial of service
- [Outgoing DoH excessive memory allocation](https://agentprime.io/advisories/CVE-2026-33594.md)
  `CVE-2026-33594` · CVE record: PowerDNS DNSdist · CVSS 5.3 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Denial of service
- [DoQ/DoH3 excessive memory allocation](https://agentprime.io/advisories/CVE-2026-33595.md)
  `CVE-2026-33595` · CVE record: PowerDNS DNSdist · CVSS 5.3 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Denial of service
- [PRSD detection denial of service](https://agentprime.io/advisories/CVE-2026-33597.md)
  `CVE-2026-33597` · CVE record: PowerDNS DNSdist · CVSS 3.7 Low · Not analysed yet · Published 22 Apr 2026 · Tags: CWE-116
- [TCP backend stream ID overflow](https://agentprime.io/advisories/CVE-2026-33596.md)
  `CVE-2026-33596` · CVE record: PowerDNS DNSdist · CVSS 3.1 Low · Not analysed yet · Published 22 Apr 2026 · Tags: Memory corruption
- [Out-of-bounds read in cache inspection via Lua](https://agentprime.io/advisories/CVE-2026-33598.md)
  `CVE-2026-33598` · CVE record: PowerDNS DNSdist · CVSS 4.8 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Memory corruption
- [Out-of-bounds read in service discovery](https://agentprime.io/advisories/CVE-2026-33599.md)
  `CVE-2026-33599` · CVE record: PowerDNS DNSdist · CVSS 3.1 Low · Not analysed yet · Published 22 Apr 2026 · Tags: Memory corruption
- [Off-by-one access when processing crafted UDP responses](https://agentprime.io/advisories/CVE-2026-33602.md)
  `CVE-2026-33602` · CVE record: PowerDNS DNSdist · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Memory corruption
- [Resource exhaustion via DoQ/DoH3 connections](https://agentprime.io/advisories/CVE-2026-33254.md)
  `CVE-2026-33254` · CVE record: PowerDNS DNSdist · CVSS 5.3 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Denial of service
- [Insufficient input validation of internal webserver](https://agentprime.io/advisories/CVE-2026-33260.md)
  `CVE-2026-33260` · CVE record: PowerDNS Authoritative and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Denial of service
- [Insufficient input validation of internal webserver](https://agentprime.io/advisories/CVE-2026-33257.md)
  `CVE-2026-33257` · CVE record: PowerDNS Authoritative and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 22 Apr 2026 · Tags: Denial of service
- [Use after free when parsing EDNS options in Lua](https://agentprime.io/advisories/CVE-2026-27854.md)
  `CVE-2026-27854` · CVE record: PowerDNS DNSdist · CVSS 4.8 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Memory corruption
- [Out-of-bounds write when rewriting large DNS packets](https://agentprime.io/advisories/CVE-2026-27853.md)
  `CVE-2026-27853` · CVE record: PowerDNS DNSdist · CVSS 5.9 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Memory corruption
- [Unbounded memory allocation for DoQ and DoH3](https://agentprime.io/advisories/CVE-2026-24030.md)
  `CVE-2026-24030` · CVE record: PowerDNS DNSdist · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Denial of service
- [DNS over HTTPS ACL bypass](https://agentprime.io/advisories/CVE-2026-24029.md)
  `CVE-2026-24029` · CVE record: PowerDNS DNSdist · CVSS 6.5 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Broken access control
- [Out-of-bounds read when parsing DNS packets via Lua](https://agentprime.io/advisories/CVE-2026-24028.md)
  `CVE-2026-24028` · CVE record: PowerDNS DNSdist · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: CWE-126
- [Information disclosure via CORS misconfiguration](https://agentprime.io/advisories/CVE-2026-0397.md)
  `CVE-2026-0397` · CVE record: PowerDNS DNSdist · CVSS 3.1 Low · Not analysed yet · Published 31 Mar 2026 · Tags: CWE-942
- [HTML injection in the web dashboard](https://agentprime.io/advisories/CVE-2026-0396.md)
  `CVE-2026-0396` · CVE record: PowerDNS DNSdist · CVSS 3.1 Low · Not analysed yet · Published 31 Mar 2026 · Tags: Cross-site scripting (XSS)
- [Denial of service via crafted DoH exchange in PowerDNS DNSdist](https://agentprime.io/advisories/CVE-2025-30187.md)
  `CVE-2025-30187` · CVE record: PowerDNS DNSdist · CVSS 3.7 Low · Not analysed yet · Published 18 Sept 2025 · Tags: Denial of service
- [Denial of service via crafted TCP exchange](https://agentprime.io/advisories/CVE-2025-30193.md)
  `CVE-2025-30193` · CVE record: PowerDNS DNSdist · CVSS 7.5 High · Not analysed yet · Published 20 May 2025 · Tags: Denial of service
- [Denial of service via crafted DoH exchange](https://agentprime.io/advisories/CVE-2025-30194.md)
  `CVE-2025-30194` · CVE record: PowerDNS DNSdist · CVSS 7.5 High · Not analysed yet · Published 29 Apr 2025 · Tags: Memory corruption
- [Transfer requests received over DoH can lead to a denial of service in DNSdist](https://agentprime.io/advisories/CVE-2024-25581.md)
  `CVE-2024-25581` · CVE record: PowerDNS DNSdist · CVSS 7.5 High · Not analysed yet · Published 13 May 2024 · Tags: CWE-20

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=powerdns-dnsdist>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/powerdns-dnsdist/>. Everything for agents: <https://agentprime.io/llms.txt>.