dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.
oryginał ENCVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HPowerdns Dnsdist
APPPowerdns1.1.0
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
Auth Bypass
Powiązane podatności
CVE-2026-33593HIGH7.5ten sam produkt
A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query.
CVE-2026-33260MEDIUM5.3ten sam produkt
An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading...
CVE-2026-33254MEDIUM5.3ten sam produkt
An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocati...
CVE-2026-33257MEDIUM5.3ten sam produkt
An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading...
CVE-2026-33594MEDIUM5.3ten sam produkt
A client can trigger excessive memory allocation by generating a lot of queries that are routed to an overload...