Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-33599

Опубликовано: 22 апр. 2026
Источник: nvd
CVSS3: 3.1
CVSS3: 8.1
EPSS Низкий

Описание

A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newServer or auto_upgrade (YAML) settings. DDR upgrade is not enabled by default.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
Версия от 1.9.0 (включая) до 1.9.13 (исключая)
cpe:2.3:a:powerdns:dnsdist:*:*:*:*:*:*:*:*
Версия от 2.0.0 (включая) до 2.0.4 (исключая)

EPSS

Процентиль: 21%
0.00283
Низкий

3.1 Low

CVSS3

8.1 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 3.1
ubuntu
4 месяца назад

A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newServer or auto_upgrade (YAML) settings. DDR upgrade is not enabled by default.

CVSS3: 3.1
debian
4 месяца назад

A rogue backend can send a crafted SVCB response to a Discovery of Des ...

CVSS3: 3.1
github
4 месяца назад

A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newServer or auto_upgrade (YAML) settings. DDR upgrade is not enabled by default.

suse-cvrf
около 2 месяцев назад

Security update for dnsdist

EPSS

Процентиль: 21%
0.00283
Низкий

3.1 Low

CVSS3

8.1 High

CVSS3

Дефекты

CWE-125