Advisories · Technology
PowerDNS DNSdist.
Every CVE that names PowerDNS DNSdist among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.7 Low
EDNS options smuggling
- PowerDNS DNSdist
- CWE-115
- CVSS 5.3 Medium
Denial of service via crafted DoH3 queries
- PowerDNS DNSdist
- Denial of service
- CVSS 4.8 Medium
Out-of-bounds read in SetMacAddrAction
- PowerDNS DNSdist
- CWE-126
- CVSS 5.3 Medium
Denial of service via IXFR queries
- PowerDNS DNSdist
- Denial of service
- CVSS 3.7 Low
Denial of service via DoH3 queries
- PowerDNS DNSdist
- CWE-705
- CVSS 3.7 Low
Prometheus denial of service via crafted DNS queries
- PowerDNS DNSdist
- CWE-116
- CVSS 7.5 High
Denial of service via crafted DNSCrypt query
- PowerDNS DNSdist
- Denial of service
- CVSS 5.3 Medium
Outgoing DoH excessive memory allocation
- PowerDNS DNSdist
- Denial of service
- CVSS 5.3 Medium
DoQ/DoH3 excessive memory allocation
- PowerDNS DNSdist
- Denial of service
- CVSS 3.7 Low
PRSD detection denial of service
- PowerDNS DNSdist
- CWE-116
- CVSS 3.1 Low
TCP backend stream ID overflow
- PowerDNS DNSdist
- Memory corruption
- CVSS 4.8 Medium
Out-of-bounds read in cache inspection via Lua
- PowerDNS DNSdist
- Memory corruption
- CVSS 3.1 Low
Out-of-bounds read in service discovery
- PowerDNS DNSdist
- Memory corruption
- CVSS 6.5 Medium
Off-by-one access when processing crafted UDP responses
- PowerDNS DNSdist
- Memory corruption
- CVSS 5.3 Medium
Resource exhaustion via DoQ/DoH3 connections
- PowerDNS DNSdist
- Denial of service
- CVSS 5.3 Medium
Insufficient input validation of internal webserver
- PowerDNS Authoritative
- PowerDNS DNSdist
- Denial of service
- CVSS 5.3 Medium
Insufficient input validation of internal webserver
- PowerDNS Authoritative
- PowerDNS DNSdist
- Denial of service
- CVSS 4.8 Medium
Use after free when parsing EDNS options in Lua
- PowerDNS DNSdist
- Memory corruption
- CVSS 5.9 Medium
Out-of-bounds write when rewriting large DNS packets
- PowerDNS DNSdist
- Memory corruption
- CVSS 5.3 Medium
Unbounded memory allocation for DoQ and DoH3
- PowerDNS DNSdist
- Denial of service
- CVSS 6.5 Medium
DNS over HTTPS ACL bypass
- PowerDNS DNSdist
- Broken access control
- CVSS 5.3 Medium
Out-of-bounds read when parsing DNS packets via Lua
- PowerDNS DNSdist
- CWE-126
- CVSS 3.1 Low
Information disclosure via CORS misconfiguration
- PowerDNS DNSdist
- CWE-942
- CVSS 3.1 Low
HTML injection in the web dashboard
- PowerDNS DNSdist
- Cross-site scripting (XSS)
- CVSS 3.7 Low
Denial of service via crafted DoH exchange in PowerDNS DNSdist
- PowerDNS DNSdist
- Denial of service
- CVSS 7.5 High
Denial of service via crafted TCP exchange
- PowerDNS DNSdist
- Denial of service
- CVSS 7.5 High
Denial of service via crafted DoH exchange
- PowerDNS DNSdist
- Memory corruption
- CVSS 7.5 High
Transfer requests received over DoH can lead to a denial of service in DNSdist
- PowerDNS DNSdist
- CWE-20