CVE Feed

    Dashboard / CVE / CVE-2026-24028

    CVE-2026-24028

    An attacker might be able to trigger an out-of-bounds read by sending a crafted DNS response packet, when custom Lua code uses newDNSPacketOverlay to parse DNS packets. The out-of-bounds read might trigger a crash, leading to a denial of service, or access unrelated memory, leading to potential information disclosure.

    Published:Mar 31, 2026
    Last Modified:Apr 15, 2026
    EPS:Mar 31, 2026
    EPSS Score:0.00015
    CVSS Score:5.3

    Affected Products

    Vendor
    Powerdns
    Product
    Dnsdist

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-126 Buffer Over-read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-42004 (CVSS 3.7) — An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be …
    CVE-2026-40211 (CVSS 5.3) — An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from b…
    CVE-2026-40210 (CVSS 4.8) — An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memor…
    CVE-2026-40209 (CVSS 5.3) — An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs inst…
    CVE-2026-40208 (CVSS 3.7) — An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid …
    CVE-2026-40011 (CVSS 3.7) — An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inser…
    CVE-2026-33593 (CVSS 7.5) — A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query.…
    CVE-2026-33594 (CVSS 5.3) — A client can trigger excessive memory allocation by generating a lot of queries that are routed to an overload…
    CVE-2026-33595 (CVSS 5.3) — A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and…
    CVE-2026-33597 (CVSS 3.7) — PRSD detection denial of service…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High