CVE-2026-24030
Medium
Description
An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service. In setups with a large quantity of memory available this usually results in an exception and the QUIC connection is properly closed, but in some cases the system might enter an out-of-memory state instead and terminate the process.
SeverityMedium
CVSS5.3
Exploit probability—
ProductPowerdns Dnsdist
PublishedMar 31, 2026
First seenMar 31, 2026
Weakness typeCWE-789CWE-789
How to fix
Update
- powerdns dnsdist1.9.12, 2.0.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| powerdns dnsdist | 1.9.0 ≤ v < 1.9.12, 2.0.0 ≤ v < 2.0.3 | 1.9.12, 2.0.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.