medium6.5
CVE-2026-33602
A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading t…
Impact
A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Powerdns | Dnsdist | from 1.9.0 before 1.9.13 from 2.0.0 before 2.0.4 |