Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-27853

Опубликовано: 31 мар. 2026
Источник: nvd
CVSS3: 5.9
CVSS3: 7.5
EPSS Низкий

Описание

An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. In some cases the rewritten packet might become larger than the initial response and even exceed 65535 bytes, potentially leading to a crash resulting in denial of service.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
Версия от 1.9.0 (включая) до 1.9.12 (исключая)
cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
Версия от 2.0.0 (включая) до 2.0.3 (исключая)

EPSS

Процентиль: 40%
0.00489
Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 5.9
ubuntu
5 месяцев назад

An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. In some cases the rewritten packet might become larger than the initial response and even exceed 65535 bytes, potentially leading to a crash resulting in denial of service.

CVSS3: 5.9
debian
5 месяцев назад

An attacker might be able to trigger an out-of-bounds write by sending ...

CVSS3: 7.5
redos
8 дней назад

Уязвимость dnsdist

CVSS3: 7.5
redos
8 дней назад

Уязвимость dnsdist

CVSS3: 5.9
github
5 месяцев назад

An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. In some cases the rewritten packet might become larger than the initial response and even exceed 65535 bytes, potentially leading to a crash resulting in denial of service.

EPSS

Процентиль: 40%
0.00489
Низкий

5.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-787