Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-33254

Опубликовано: 22 апр. 2026
Источник: nvd
CVSS3: 5.3
CVSS3: 7.5
EPSS Низкий

Описание

An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service. DOQ and DoH3 are disabled by default.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
Версия от 1.9.0 (включая) до 1.9.13 (исключая)
cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
Версия от 2.0.0 (включая) до 2.0.4 (исключая)

EPSS

Процентиль: 31%
0.00371
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVSS3: 7.5
ubuntu
7 месяцев назад

An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service. DOQ and DoH3 are disabled by default.

CVSS3: 7.5
debian
7 месяцев назад

An attacker can create a large number of concurrent DoQ or DoH3 connec ...

CVSS3: 5.3
github
7 месяцев назад

An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service. DOQ and DoH3 are disabled by default.

CVSS3: 9.1
altlinux
7 месяцев назад

ALT-PU-2026-6683: package `dnsdist` update to version 2.0.5-alt1

CVSS3: 9.1
altlinux
7 месяцев назад

ALT-PU-2026-6681: package `dnsdist` update to version 1.9.14-alt1

EPSS

Процентиль: 31%
0.00371
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-770