Dnsdist CVE-2026-24028

dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.

Remote denial of service in dnsdist allows unauthenticated attackers to crash the DNS load balancer by sending specially

DNSdist fails to validate packet size bounds when rewriting DNS questions or responses via Lua methods (DNSQuestion:chan

Memory exhaustion in DNSdist allows remote, unauthenticated attackers to trigger denial of service by crafting malicious

DNSdist instances using custom Lua code can be crashed via denial of service when the DNSQuestion:getEDNSOptions method

DNSdist is vulnerable to denial of service via out-of-bounds write when processing crafted UDP responses from a rogue ba

PowerDNS dnsdist allows unauthenticated DNS over HTTPS (DoH) queries to bypass access control lists when the early_acl_d

An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing d

Denial of service in PowerDNS Authoritative, Recursor, and dnsdist via unbounded memory allocation in their internal web

Unlimited memory allocation in PowerDNS internal web server allows remote denial of service via crafted web requests. Th

dnsdist allows remote denial-of-service attacks through memory exhaustion by generating numerous error responses on sing

dnsdist can be forced into excessive memory allocation when a client generates high volumes of DNS queries routed to an