PT-2026-52384 · Powerdns · Dnsdist

Vitaly Simonovich · Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-42004

NVD

CVSS v3.1

3.7

Baixa

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS option(s) that DNSdist did not filter.

Correção

Identificadores relacionados

CVE-2026-42004

Produtos afetados

Dnsdist

Referências · 2

• https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-42004 · Nota de Segurança