PowerDNS CVE-2026-33257

dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.

Out-of-bounds read in PowerDNS dnsdist allows unauthenticated remote attackers to trigger denial of service or potential

Remote denial of service in dnsdist allows unauthenticated attackers to crash the DNS load balancer by sending specially

DNSdist fails to validate packet size bounds when rewriting DNS questions or responses via Lua methods (DNSQuestion:chan

Memory exhaustion in DNSdist allows remote, unauthenticated attackers to trigger denial of service by crafting malicious

DNSdist instances using custom Lua code can be crashed via denial of service when the DNSQuestion:getEDNSOptions method

DNSdist is vulnerable to denial of service via out-of-bounds write when processing crafted UDP responses from a rogue ba

PowerDNS dnsdist allows unauthenticated DNS over HTTPS (DoH) queries to bypass access control lists when the early_acl_d

An issue has been found in PowerDNS DNSDist before 1.3.3 allowing a remote attacker to craft a DNS query with trailing d

Denial of service in PowerDNS Authoritative, Recursor, and dnsdist via unbounded memory allocation in their internal web

dnsdist allows remote denial-of-service attacks through memory exhaustion by generating numerous error responses on sing

dnsdist can be forced into excessive memory allocation when a client generates high volumes of DNS queries routed to an