CVE-2026-27854 in PowerDNS DNSdist
요약 (영어)
An attacker might be able to trigger a use-after-free by sending crafted DNS queries to a DNSdist using the DNSQuestion:getEDNSOptions method in custom Lua code. In some cases DNSQuestion:getEDNSOptions might refer to a version of the DNS packet that has been modified, thus triggering a use-after-free and potentially a crash resulting in denial of service.
예약하다
2026. 02. 24.
공개
2026. 03. 31.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354377 | PowerDNS DNSdist 서비스 거부 | 404 | 정의되지 않음 | 공식 수정 | CVE-2026-27854 |