Description
An attacker might be able to trigger a use-after-free by sending crafted DNS queries to a DNSdist using the DNSQuestion:getEDNSOptions method in custom Lua code. In some cases DNSQuestion:getEDNSOptions might refer to a version of the DNS packet that has been modified, thus triggering a use-after-free and potentially a crash resulting in denial of service.
Scores
CVSS v3
4.8
EPSS
0.0001
EPSS Percentile
0.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-416
Status
published
Products (3)
PowerDNS/DNSdist
1.9.0 - 1.9.12
powerdns/dnsdist
1.9.0 - 1.9.12
PowerDNS/DNSdist
2.0.0 - 2.0.3
Published
Mar 31, 2026
Tracked Since
Mar 31, 2026