Known vulnerabilities in dnsdist

Vendor: PowerDNS.COM B.V.
Software: dnsdist
Software CPE: cpe:2.3:a:powerdns_com_b_v:dnsdist:*:*:*:*:*:*:*:*
Website: https://www.powerdns.com/
Total vulnerabilities: 33
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dnsdist dnsdist is affected by 33 known vulnerabilities: 1 high, 21 medium, 11 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141167 - Resource exhaustion
CVE-2026-52682		 CWE-400 Medium
No
No
 1.9.16, 2.0.8, 2.1.1 06.08.2026 SB20260806120
SB2026080902
SB2026080903
and 1 more
#VU135336 - Improper Encoding or Escaping of Output
CVE-2026-40011		 CWE-116 Low
No
No
 1.9.15, 2.0.7 25.06.2026 SB20260625152
SB2026062613
#VU135337 - Misinterpretation of Input
CVE-2026-42004		 CWE-115 Low
No
No
 1.9.15, 2.0.7 25.06.2026 SB20260625152
SB2026062613
#VU135338 - Incorrect Control Flow Scoping
CVE-2026-40208		 CWE-705 Low
No
No
 1.9.15, 2.0.7 25.06.2026 SB20260625152
SB2026062613
#VU135339 - Missing Release of Resource after Effective Lifetime
CVE-2026-40209		 CWE-772 Medium
No
No
 1.9.15, 2.0.7 25.06.2026 SB20260625152
SB2026062613
#VU135340 - Buffer over-read
CVE-2026-40210		 CWE-126 Medium
No
No
 1.9.15, 2.0.7 25.06.2026 SB20260625152
SB2026062613
#VU135341 - Allocation of Resources Without Limits or Throttling
CVE-2026-40211		 CWE-770 Medium
No
No
 1.9.15, 2.0.7 25.06.2026 SB20260625152
SB2026062613
#VU135238 - Allocation of Resources Without Limits or Throttling
CVE-2026-42005		 CWE-770 Medium
No
No
 1.9.15, 2.0.7 25.06.2026 SB2026062580
SB20260625152
SB20260625205
and 8 more
#VU126954 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CVE-2026-0396		 CWE-80 Low
No
No
 1.9.12, 2.0.3 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126955 - Overly Permissive Cross-domain Whitelist
CVE-2026-0397		 CWE-942 Low
No
No
 1.9.12, 2.0.3 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126956 - Out-of-bounds read
CVE-2026-24028		 CWE-125 Medium
No
No
 1.9.12, 2.0.3 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126957 - Incorrect Authorization
CVE-2026-24029		 CWE-863 Medium
No
No
 1.9.12, 2.0.3 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126958 - Uncontrolled Memory Allocation
CVE-2026-24030		 CWE-789 Medium
No
No
 1.9.12, 2.0.3 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126959 - Use After Free
CVE-2026-27854		 CWE-416 Low
No
No
 1.9.12, 2.0.3 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126960 - Out-of-bounds write
CVE-2026-27853		 CWE-787 Medium
No
No
 1.9.12, 2.0.3 23.04.2026 SB2026042357
SB2026042358
SB2026042359
and 6 more
#VU126949 - Improper input validation
CVE-2026-33597		 CWE-20 Low
No
No
 1.9.13, 2.0.4 23.04.2026 SB2026042356
SB2026051408
SB2026060601
#VU126950 - Integer overflow
CVE-2026-33596		 CWE-190 Low
No
No
 1.9.13, 2.0.4 23.04.2026 SB2026042356
SB2026051408
SB2026060601
#VU126951 - Allocation of Resources Without Limits or Throttling
CVE-2026-33595		 CWE-770 Medium
No
No
 1.9.13, 2.0.4 23.04.2026 SB2026042356
SB2026051408
SB2026060601
#VU126952 - Allocation of Resources Without Limits or Throttling
CVE-2026-33594		 CWE-770 Medium
No
No
 1.9.13, 2.0.4 23.04.2026 SB2026042356
SB2026051408
SB2026060601
#VU126953 - Divide By Zero
CVE-2026-33593		 CWE-369 Medium
No
No
 1.9.13, 2.0.4 23.04.2026 SB2026042356
SB2026051408
SB2026060601


Showing elements 1 - 20 out of 33