CVE-2026-27853 in PowerDNS DNSdist
Сводка (Английский)
An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. In some cases the rewritten packet might become larger than the initial response and even exceed 65535 bytes, potentially leading to a crash resulting in denial of service.
Резервировать
24.02.2026
Раскрытие
31.03.2026
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 354374 | PowerDNS DNSdist повреждение памяти | 787 | Не определено | Официальное исправление | CVE-2026-27853 |