DeutschShown in its original language — a full translation is planned for a future version.
PowerDNS: Mehrere Schwachstellen
view advisory published 2026-06-25
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PowerDNS ausnutzen, um Denial-of-Service-Zustände herbeizuführen, DNS-Caches zu manipulieren, Sicherheitsprüfungen zu umgehen, vertrauliche Informationen offenzulegen, DNSSEC-Validierungen zu beeinträchtigen oder die Integrität und Verfügbarkeit der DNS-Auflösung zu beeinflussen.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-52690US | — | — | ||
Spoofing replies to Recursor might mark an IP of an authoritative server as not supporting EDNS, causing valdiation of DNSSEC records served by that server to fail. | ||||
| CVE-2026-42390US | — | — | ||
An invalid zone might pass ZONEMD validation while it should not. This is only relevant if ZoneToCache is configured with ZONEMD validation. | ||||
| CVE-2026-42389US | — | — | ||
This fix provides extra hardening for the 5.4.x branch by doing extra validation of incoming answers from authoritative servers. | ||||
| CVE-2026-42388US | — | — | ||
Incomplete validation of the SOA record present in a catalog zone might lead to a crash. | ||||
| CVE-2026-42387US | — | — | ||
A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recursor due to insuffcient input validation. | ||||
| CVE-2026-40012US | — | — | ||
ECS zero scoped answers are stored in the packet cache while they should not. This impacts only configurations that have ECS enabled; | ||||
| CVE-2026-42004US | — | — | ||
An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, c… | ||||
| CVE-2026-40211US | — | — | ||
An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC… | ||||
| CVE-2026-40210US | — | — | ||
An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash. | ||||
| CVE-2026-40209US | — | — | ||
An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could… | ||||
| CVE-2026-40208US | — | — | ||
An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame. | ||||
| CVE-2026-40011US | — | — | ||
An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the promethe… | ||||
| CVE-2026-33612US | — | — | ||
A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to cache poisoning. | ||||
| CVE-2026-42005US | — | — | ||
An attacker can send a web request that causes unlimited memory
allocation in the internal web server, leading to a denial of service.
The internal web server is disabled by defa… | ||||
02
references
External citations — patches, advisories, analysis.
- PowerDNS DNSdist 1.9.15 and 2.0.7 Release vom 2026-06-25external
- PowerDNS Security Advisory 2026-08 for PowerDNS Recursor vom 2026-06-25external
- Fedora Security Advisory FEDORA-EPEL-2026-A9341FA7F6 vom 2026-07-13external
- openSUSE Security Update OPENSUSE-SU-2026:21533-1 vom 2026-08-06external
- openSUSE Security Update OPENSUSE-SU-2026:11411-1 vom 2026-08-01external
- SUSE Security Update SUSE-SU-2026:23146-1 vom 2026-08-14external
- SUSE Security Update SUSE-SU-2026:23123-1 vom 2026-08-14external
- Debian Security Advisory DSA-6367 vom 2026-06-26external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan