Product by Open Source
Dnsdist
26 known vulnerabilities in Dnsdist (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
26
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-33598 | Out-of-bounds read in cache inspection via Lua | 9.1 | |
| High | CVE-2026-33602 | Off-by-one access when processing crafted UDP responses | 8.2 | |
| High | CVE-2026-24028 | Out-of-bounds read when parsing DNS packets via Lua | 5.3 | |
| High | CVE-2026-33260 | Insufficient input validation of internal webserver | 7.5 | |
| High | CVE-2026-33257 | Insufficient input validation of internal webserver | 7.5 | |
| Medium | CVE-2026-40211 | Denial of service via crafted DoH3 queries | 5.3 | |
| Medium | CVE-2026-40209 | Denial of service via IXFR queries | 5.3 | |
| Medium | CVE-2026-40210 | Out-of-bounds read in SetMacAddrAction | 4.8 | |
| Medium | CVE-2026-42005 | Insufficient input validation of internal web server | 4.3 | |
| High | CVE-2026-33593 | Denial of service via crafted DNSCrypt query | 7.5 | |
| High | CVE-2026-33595 | DoQ/DoH3 excessive memory allocation | 7.5 | |
| High | CVE-2026-33594 | Outgoing DoH excessive memory allocation | 7.5 | |
| High | CVE-2026-33254 | Resource exhaustion via DoQ/DoH3 connections | 7.5 | |
| High | CVE-2026-33599 | Out-of-bounds read in service discovery | 8.1 | |
| High | CVE-2026-33597 | PRSD detection denial of service | 7.5 | |
| High | CVE-2026-27853 | Out-of-bounds write when rewriting large DNS packets | 5.9 | |
| High | CVE-2026-24030 | Unbounded memory allocation for DoQ and DoH3 | 5.3 | |
| High | CVE-2026-27854 | Use after free when parsing EDNS options in Lua | 4.8 | |
| Medium | CVE-2026-33596 | TCP backend stream ID overflow | 6.5 | |
| Medium | CVE-2026-24029 | DNS over HTTPS ACL bypass | 6.5 | |
| Low | CVE-2026-40208 | Denial of service via DoH3 queries | 3.7 | |
| Low | CVE-2026-42004 | EDNS options smuggling | 3.7 | |
| Low | CVE-2026-40011 | Prometheus denial of service via crafted DNS queries | 3.7 | |
| Medium | CVE-2026-0397 | Information disclosure via CORS misconfiguration | 3.1 | |
| Medium | CVE-2026-0396 | HTML injection in the web dashboard | 3.1 |