Product by PowerDNS
PowerDNS DNSdist
32 known vulnerabilities in PowerDNS DNSdist (PowerDNS), 0 of them actively exploited (CISA KEV).
Key figures
32
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-30194 | Denial of service via crafted DoH exchange | 7.5 | |
| High | CVE-2016-7069 | Open-Xchange Dnsdist: Improper Input Validation | 5.9 | |
| Critical | CVE-2026-33598 | Out-of-bounds read in cache inspection via Lua | 9.1 | |
| Medium | CVE-2018-14663 | Dnsdist: Improper Input Validation | 5.9 | |
| High | CVE-2026-33602 | Off-by-one access when processing crafted UDP responses | 8.2 | |
| High | CVE-2024-25581 | Transfer requests received over DoH can lead to a denial of service in DNSdist | 7.5 | |
| High | CVE-2026-24028 | Out-of-bounds read when parsing DNS packets via Lua | 5.3 | |
| High | CVE-2017-7557 | Red Hat Dnsdist: Improper Authentication | 8.8 | |
| High | CVE-2026-33260 | Insufficient input validation of internal webserver | 7.5 | |
| High | CVE-2026-33257 | Insufficient input validation of internal webserver | 7.5 | |
| Medium | CVE-2026-40211 | Denial of service via crafted DoH3 queries | 5.3 | |
| Medium | CVE-2026-40209 | Denial of service via IXFR queries | 5.3 | |
| Medium | CVE-2026-40210 | Out-of-bounds read in SetMacAddrAction | 4.8 | |
| High | CVE-2025-30193 | Denial of service via crafted TCP exchange | 7.5 | |
| Medium | CVE-2026-42005 | Insufficient input validation of internal web server | 4.3 | |
| High | CVE-2026-33593 | Denial of service via crafted DNSCrypt query | 7.5 | |
| High | CVE-2026-33595 | DoQ/DoH3 excessive memory allocation | 7.5 | |
| High | CVE-2026-33594 | Outgoing DoH excessive memory allocation | 7.5 | |
| High | CVE-2026-33254 | Resource exhaustion via DoQ/DoH3 connections | 7.5 | |
| High | CVE-2026-33599 | Out-of-bounds read in service discovery | 8.1 | |
| High | CVE-2026-33597 | PRSD detection denial of service | 7.5 | |
| High | CVE-2026-27853 | Out-of-bounds write when rewriting large DNS packets | 5.9 | |
| High | CVE-2026-24030 | Unbounded memory allocation for DoQ and DoH3 | 5.3 | |
| High | CVE-2026-27854 | Use after free when parsing EDNS options in Lua | 4.8 | |
| Medium | CVE-2026-33596 | TCP backend stream ID overflow | 6.5 |