ALT-PU-2026-6683

Критический

ALT-PU-2026-6683: package dnsdist update to version 2.0.5-alt1

Источник

errata.altlinux.org

Дата публикации

27.04.2026

Дата обновления

27.04.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades dnsdist to version 2.0.5-alt1.

Устраненные уязвимости11

CVE-2026-33254

Высокий 7.5

Дата публикации: 22.04.2026

CWE-770

An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service. DOQ and DoH3 are disabled by default.

CVSS 3.1

Высокий 7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

Ссылки

CVE-2026-33254 https://nvd.nist.gov/vuln/detail/CVE-2026-33254

Ссылки1

ALT-PU-2026-6683 https://errata.altlinux.org/ALT-PU-2026-6683

Связанные уязвимости

ALT-PU-2026-6681

CVSS3: 9.1

altlinux

7 месяцев назад

ALT-PU-2026-6681: package `dnsdist` update to version 1.9.14-alt1

openSUSE-SU-2026:21015-1

suse-cvrf

5 месяцев назад

Security update for dnsdist

CVE-2026-33254

CVSS3: 7.5

ubuntu

7 месяцев назад

An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service. DOQ and DoH3 are disabled by default.

CVE-2026-33254

CVSS3: 7.5

nvd

7 месяцев назад

An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service. DOQ and DoH3 are disabled by default.

CVE-2026-33254

CVSS3: 7.5

debian

7 месяцев назад

An attacker can create a large number of concurrent DoQ or DoH3 connec ...