Vulnerability-Lookup

SUSE-SU-2026:23123-1

Vulnerability from csaf_suse - Published: 2026-08-05 09:14 - Updated: 2026-09-16 20:11

Summary

Security update for dnsdist

Severity

Important

Notes

Title of the patch: Security update for dnsdist

Description of the patch: This update for dnsdist fixes the following issues: Update to 1.9.15. Changes for dnsdist: - https://www.dnsdist.org/changelog.html#change-1.9.15 - https://www.dnsdist.org/changelog.html#change-1.9.14 Security issues fixed: - CVE-2026-40011: invalid output produced in the prometheus endpoint when a large number of crafted DNS queries are sent (bsc#1269204). - CVE-2026-40208: processing of DoH3 queries can be delayed via DoH3 GET queries with an invalid DATA frames (bsc#1269207). - CVE-2026-40209: outgoing TCP connections to backend can get stuck until a timeout occurs when specially crafted IXFR queries are sent (bsc#1269206). - CVE-2026-40210: out-of-bounds read when `SetMacAddrAction` is used can lead to uninitialized memory being sent over the network or a crash (bsc#1269205). - CVE-2026-40211: crafted DNS over HTTP/3 queries can trigger an exception that prevents memory from being freed and can lead to an OOM condition (bsc#1269203). - CVE-2026-42004: crafted EDNS OPT record will be ignored by filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted (bsc#1269202). - CVE-2026-42005: crafted web request can cause unlimited memory allocation in the internal web server and lead to a DoS (bsc#1269201).

Patchnames: SUSE-SLES-16.0-1432

CVE-2026-40011

3.7 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 8 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-40208

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 8 products, the same list as for CVE-2026-40011

Threats

Impact moderate

CVE-2026-40209

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 8 products, the same list as for CVE-2026-40011

Threats

Impact important

CVE-2026-40210

8.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 8 products, the same list as for CVE-2026-40011

Threats

Impact important

CVE-2026-40211

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 8 products, the same list as for CVE-2026-40011

Threats

Impact moderate

CVE-2026-42004

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 8 products, the same list as for CVE-2026-40011

Threats

Impact moderate

CVE-2026-42005

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 8 products, the same list as for CVE-2026-40011

Threats

Impact moderate

References

32 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1269201	self
https://bugzilla.suse.com/1269202	self
https://bugzilla.suse.com/1269203	self
https://bugzilla.suse.com/1269204	self
https://bugzilla.suse.com/1269205	self
https://bugzilla.suse.com/1269206	self
https://bugzilla.suse.com/1269207	self
https://www.suse.com/security/cve/CVE-2026-40011/	self
https://www.suse.com/security/cve/CVE-2026-40208/	self
https://www.suse.com/security/cve/CVE-2026-40209/	self
https://www.suse.com/security/cve/CVE-2026-40210/	self
https://www.suse.com/security/cve/CVE-2026-40211/	self
https://www.suse.com/security/cve/CVE-2026-42004/	self
https://www.suse.com/security/cve/CVE-2026-42005/	self
https://www.suse.com/security/cve/CVE-2026-40011	external
https://bugzilla.suse.com/1269204	external
https://www.suse.com/security/cve/CVE-2026-40208	external
https://bugzilla.suse.com/1269207	external
https://www.suse.com/security/cve/CVE-2026-40209	external
https://bugzilla.suse.com/1269206	external
https://www.suse.com/security/cve/CVE-2026-40210	external
https://bugzilla.suse.com/1269205	external
https://www.suse.com/security/cve/CVE-2026-40211	external
https://bugzilla.suse.com/1269203	external
https://www.suse.com/security/cve/CVE-2026-42004	external
https://bugzilla.suse.com/1269202	external
https://www.suse.com/security/cve/CVE-2026-42005	external
https://bugzilla.suse.com/1269201	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for dnsdist",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for dnsdist fixes the following issues:\n\nUpdate to 1.9.15.\n\nChanges for dnsdist:\n\n- https://www.dnsdist.org/changelog.html#change-1.9.15\n- https://www.dnsdist.org/changelog.html#change-1.9.14\n\nSecurity issues fixed:\n\n- CVE-2026-40011: invalid output produced in the prometheus endpoint when a large number of crafted DNS queries are sent\n  (bsc#1269204).\n- CVE-2026-40208: processing of DoH3 queries can be delayed via DoH3 GET queries with an invalid DATA frames\n  (bsc#1269207).\n- CVE-2026-40209: outgoing TCP connections to backend can get stuck until a timeout occurs when specially crafted IXFR\n  queries are sent (bsc#1269206).\n- CVE-2026-40210: out-of-bounds read when `SetMacAddrAction` is used can lead to uninitialized memory being sent over\n  the network or a crash (bsc#1269205).\n- CVE-2026-40211: crafted DNS over HTTP/3 queries can trigger an exception that prevents memory from being freed and can\n  lead to an OOM condition (bsc#1269203).\n- CVE-2026-42004: crafted EDNS OPT record will be ignored by filtering rules, but will be rewritten as a valid OPT\n  record when EDNS Client Subnet is inserted (bsc#1269202).\n- CVE-2026-42005: crafted web request can cause unlimited memory allocation in the internal web server and lead to a DoS\n  (bsc#1269201).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLES-16.0-1432",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_23123-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:23123-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202623123-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:23123-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028321.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269201",
        "url": "https://bugzilla.suse.com/1269201"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269202",
        "url": "https://bugzilla.suse.com/1269202"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269203",
        "url": "https://bugzilla.suse.com/1269203"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269204",
        "url": "https://bugzilla.suse.com/1269204"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269205",
        "url": "https://bugzilla.suse.com/1269205"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269206",
        "url": "https://bugzilla.suse.com/1269206"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1269207",
        "url": "https://bugzilla.suse.com/1269207"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-40011 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-40011/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-40208 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-40208/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-40209 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-40209/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-40210 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-40210/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-40211 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-40211/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-42004 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-42004/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-42005 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-42005/"
      }
    ],
    "title": "Security update for dnsdist",
    "tracking": {
      "current_release_date": "2026-09-16T20:11:40Z",
      "generator": {
        "date": "2026-08-05T09:14:01Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:23123-1",
      "initial_release_date": "2026-08-05T09:14:01Z",
      "revision_history": [
        {
          "date": "2026-08-05T09:14:01Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T19:23:47Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T20:11:40Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsdist-1.9.15-160000.1.1.aarch64",
                "product": {
                  "name": "dnsdist-1.9.15-160000.1.1.aarch64",
                  "product_id": "dnsdist-1.9.15-160000.1.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:powerdns:dnsdist:1.9.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/dnsdist@1.9.15-160000.1.1?arch=aarch64\u0026upstream=dnsdist-1.9.15-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsdist-1.9.15-160000.1.1.ppc64le",
                "product": {
                  "name": "dnsdist-1.9.15-160000.1.1.ppc64le",
                  "product_id": "dnsdist-1.9.15-160000.1.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:powerdns:dnsdist:1.9.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/dnsdist@1.9.15-160000.1.1?arch=ppc64le\u0026upstream=dnsdist-1.9.15-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsdist-1.9.15-160000.1.1.s390x",
                "product": {
                  "name": "dnsdist-1.9.15-160000.1.1.s390x",
                  "product_id": "dnsdist-1.9.15-160000.1.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:powerdns:dnsdist:1.9.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/dnsdist@1.9.15-160000.1.1?arch=s390x\u0026upstream=dnsdist-1.9.15-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "dnsdist-1.9.15-160000.1.1.x86_64",
                "product": {
                  "name": "dnsdist-1.9.15-160000.1.1.x86_64",
                  "product_id": "dnsdist-1.9.15-160000.1.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:powerdns:dnsdist:1.9.15:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/dnsdist@1.9.15-160000.1.1?arch=x86_64\u0026upstream=dnsdist-1.9.15-160000.1.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 16.0",
                "product": {
                  "name": "SUSE Linux Enterprise Server 16.0",
                  "product_id": "SUSE Linux Enterprise Server 16.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:16:16.0:server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP applications 16.0",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP applications 16.0",
                  "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-1.9.15-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64"
        },
        "product_reference": "dnsdist-1.9.15-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-1.9.15-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le"
        },
        "product_reference": "dnsdist-1.9.15-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-1.9.15-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x"
        },
        "product_reference": "dnsdist-1.9.15-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-1.9.15-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
          "product_id": "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
        },
        "product_reference": "dnsdist-1.9.15-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-1.9.15-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64"
        },
        "product_reference": "dnsdist-1.9.15-160000.1.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-1.9.15-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le"
        },
        "product_reference": "dnsdist-1.9.15-160000.1.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-1.9.15-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x"
        },
        "product_reference": "dnsdist-1.9.15-160000.1.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "dnsdist-1.9.15-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
          "product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
        },
        "product_reference": "dnsdist-1.9.15-160000.1.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-40011",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-40011"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-40011",
          "url": "https://www.suse.com/security/cve/CVE-2026-40011"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269204 for CVE-2026-40011",
          "url": "https://bugzilla.suse.com/1269204"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-05T09:14:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-40011"
    },
    {
      "cve": "CVE-2026-40208",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-40208"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-40208",
          "url": "https://www.suse.com/security/cve/CVE-2026-40208"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269207 for CVE-2026-40208",
          "url": "https://bugzilla.suse.com/1269207"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-05T09:14:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-40208"
    },
    {
      "cve": "CVE-2026-40209",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-40209"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a denial of service if there is a limit to the number of concurrent connections to this backend, or if the process runs out of file descriptors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-40209",
          "url": "https://www.suse.com/security/cve/CVE-2026-40209"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269206 for CVE-2026-40209",
          "url": "https://bugzilla.suse.com/1269206"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-05T09:14:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-40209"
    },
    {
      "cve": "CVE-2026-40210",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-40210"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-40210",
          "url": "https://www.suse.com/security/cve/CVE-2026-40210"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269205 for CVE-2026-40210",
          "url": "https://bugzilla.suse.com/1269205"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-05T09:14:01Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-40210"
    },
    {
      "cve": "CVE-2026-40211",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-40211"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-40211",
          "url": "https://www.suse.com/security/cve/CVE-2026-40211"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269203 for CVE-2026-40211",
          "url": "https://bugzilla.suse.com/1269203"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-05T09:14:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-40211"
    },
    {
      "cve": "CVE-2026-42004",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-42004"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist\u0027s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS option(s) that DNSdist did not filter.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-42004",
          "url": "https://www.suse.com/security/cve/CVE-2026-42004"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269202 for CVE-2026-42004",
          "url": "https://bugzilla.suse.com/1269202"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-05T09:14:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-42004"
    },
    {
      "cve": "CVE-2026-42005",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-42005"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker can send a web request that causes unlimited memory \nallocation in the internal web server, leading to a denial of service. \nThe internal web server is disabled by default.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
          "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-42005",
          "url": "https://www.suse.com/security/cve/CVE-2026-42005"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1269201 for CVE-2026-42005",
          "url": "https://bugzilla.suse.com/1269201"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server 16.0:dnsdist-1.9.15-160000.1.1.x86_64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.aarch64",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.s390x",
            "SUSE Linux Enterprise Server for SAP applications 16.0:dnsdist-1.9.15-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-08-05T09:14:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-42005"
    }
  ]
}

CVE-2026-40011 (GCVE-0-2026-40011)

Vulnerability from cvelistv5 – Published: 2026-06-25 12:22 – Updated: 2026-06-25 13:23

Title

Prometheus denial of service via crafted DNS queries

Summary

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-25 13:23 UTC

CWE

Improper Encoding or Escaping of Output
CWE-116 - Improper Encoding or Escaping of Output

Assigner

OX mitre root Scorecard

References

1 reference

URL	Tags
https://www.dnsdist.org/security-advisories/power…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	DNSdist	Affected: 1.9.0 , < 1.9.15 (semver) Affected: 2.0.0 , < 2.0.7 (semver)

Date Public

2026-06-24 22:00

Credits

Haruki Oyama (Waseda University)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40011",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:23:09.989984Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-116",
                "description": "CWE-116 Improper Encoding or Escaping of Output",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:23:46.840Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "Prometheus export"
          ],
          "packageName": "dnsdist",
          "product": "DNSdist",
          "programFiles": [
            "dnsdist-web.cc"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "1.9.15",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.0.7",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Haruki Oyama (Waseda University)"
        }
      ],
      "datePublic": "2026-06-24T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.\u003c/p\u003e"
            }
          ],
          "value": "An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Improper Encoding or Escaping of Output",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T12:22:19.248Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Prometheus denial of service via crafted DNS queries",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-40011",
    "datePublished": "2026-06-25T12:22:19.248Z",
    "dateReserved": "2026-04-08T09:59:59.341Z",
    "dateUpdated": "2026-06-25T13:23:46.840Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40208 (GCVE-0-2026-40208)

Vulnerability from cvelistv5 – Published: 2026-06-25 12:22 – Updated: 2026-06-25 13:24

Title

Denial of service via DoH3 queries

Summary

An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-25 13:24 UTC

CWE

Incorrect Control Flow Scoping
CWE-705 - Incorrect Control Flow Scoping

Assigner

OX mitre root Scorecard

References

1 reference

URL	Tags
https://www.dnsdist.org/security-advisories/power…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	DNSdist	Affected: 1.9.0 , < 1.9.15 (semver) Affected: 2.0.0 , < 2.0.7 (semver)

Date Public

2026-06-24 22:00

Credits

ylwango613

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40208",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:24:51.405029Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-705",
                "description": "CWE-705 Incorrect Control Flow Scoping",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:24:55.798Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "DNS over HTTP3"
          ],
          "packageName": "dnsdist",
          "product": "DNSdist",
          "programFiles": [
            "doh3.cc"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "1.9.15",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.0.7",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "ylwango613"
        }
      ],
      "datePublic": "2026-06-24T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame.\u003c/p\u003e"
            }
          ],
          "value": "An attacker might be able to delay the processing of DoH3 queries by sending DoH3 GET queries with an invalid DATA frame."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Incorrect Control Flow Scoping",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T12:22:42.722Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Denial of service via DoH3 queries",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-40208",
    "datePublished": "2026-06-25T12:22:42.722Z",
    "dateReserved": "2026-04-10T07:11:39.060Z",
    "dateUpdated": "2026-06-25T13:24:55.798Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40209 (GCVE-0-2026-40209)

Vulnerability from cvelistv5 – Published: 2026-06-25 12:23 – Updated: 2026-06-25 13:56

Title

Denial of service via IXFR queries

Summary

An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a denial of service if there is a limit to the number of concurrent connections to this backend, or if the process runs out of file descriptors.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-25 13:56 UTC

CWE

Missing Release of Resource after Effective Lifetime
CWE-772 - Missing Release of Resource after Effective Lifetime

Assigner

OX mitre root Scorecard

References

1 reference

URL	Tags
https://www.dnsdist.org/security-advisories/power…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	DNSdist	Affected: 1.9.0 , < 1.9.15 (semver) Affected: 2.0.0 , < 2.0.7 (semver)

Date Public

2026-06-24 22:00

Credits

Qifan Zhang (Palo Alto Networks)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40209",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:56:17.791790Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-772",
                "description": "CWE-772 Missing Release of Resource after Effective Lifetime",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:56:22.793Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "DNS over TCP to the backend"
          ],
          "packageName": "dnsdist",
          "product": "DNSdist",
          "programFiles": [
            "dnsdist-tcp-downstream.cc"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "1.9.15",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.0.7",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Qifan Zhang (Palo Alto Networks)"
        }
      ],
      "datePublic": "2026-06-24T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a denial of service if there is a limit to the number of concurrent connections to this backend, or if the process runs out of file descriptors.\u003c/p\u003e"
            }
          ],
          "value": "An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a denial of service if there is a limit to the number of concurrent connections to this backend, or if the process runs out of file descriptors."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Missing Release of Resource after Effective Lifetime",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T12:23:05.694Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Denial of service via IXFR queries",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-40209",
    "datePublished": "2026-06-25T12:23:05.694Z",
    "dateReserved": "2026-04-10T07:11:39.060Z",
    "dateUpdated": "2026-06-25T13:56:22.793Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40210 (GCVE-0-2026-40210)

Vulnerability from cvelistv5 – Published: 2026-06-25 12:23 – Updated: 2026-06-25 13:49

Title

Out-of-bounds read in SetMacAddrAction

Summary

An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash.

Severity

4.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-25 13:49 UTC

CWE

Buffer Over-read
CWE-126 - Buffer Over-read

Assigner

OX mitre root Scorecard

References

1 reference

URL	Tags
https://www.dnsdist.org/security-advisories/power…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	DNSdist	Affected: 1.9.0 , < 1.9.15 (semver) Affected: 2.0.0 , < 2.0.7 (semver)

Date Public

2026-06-24 22:00

Credits

Qifan Zhang (Palo Alto Networks)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40210",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:49:25.851878Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-126",
                "description": "CWE-126 Buffer Over-read",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:49:35.668Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "SetMacAddrAction"
          ],
          "packageName": "dnsdist",
          "product": "DNSdist",
          "programFiles": [
            "dnsdist-actions-factory.cc"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "1.9.15",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.0.7",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Qifan Zhang (Palo Alto Networks)"
        }
      ],
      "datePublic": "2026-06-24T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash.\u003c/p\u003e"
            }
          ],
          "value": "An out-of-bounds read might happen when SetMacAddrAction is used, potentially resulting in uninitialized memory being sent over the network or a crash."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer Over-read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T12:23:31.623Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Out-of-bounds read in SetMacAddrAction",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-40210",
    "datePublished": "2026-06-25T12:23:31.623Z",
    "dateReserved": "2026-04-10T07:11:39.060Z",
    "dateUpdated": "2026-06-25T13:49:35.668Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-40211 (GCVE-0-2026-40211)

Vulnerability from cvelistv5 – Published: 2026-06-25 12:23 – Updated: 2026-06-25 13:45

Title

Denial of service via crafted DoH3 queries

Summary

An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-25 13:44 UTC

CWE

Allocation of Resources Without Limits or Throttling
CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

OX mitre root Scorecard

References

1 reference

URL	Tags
https://www.dnsdist.org/security-advisories/power…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	DNSdist	Affected: 1.9.0 , < 1.9.15 (semver) Affected: 2.0.0 , < 2.0.7 (semver)

Date Public

2026-06-24 22:00

Credits

Mehtab Zafar

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-40211",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:44:56.582604Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:45:02.430Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "DNS over HTTP3"
          ],
          "packageName": "dnsdist",
          "product": "DNSdist",
          "programFiles": [
            "dnsdist-crypto.cc"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "1.9.15",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.0.7",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Mehtab Zafar"
        }
      ],
      "datePublic": "2026-06-24T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.\u003c/p\u003e"
            }
          ],
          "value": "An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T12:23:55.585Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Denial of service via crafted DoH3 queries",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-40211",
    "datePublished": "2026-06-25T12:23:55.585Z",
    "dateReserved": "2026-04-10T07:11:39.060Z",
    "dateUpdated": "2026-06-25T13:45:02.430Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42004 (GCVE-0-2026-42004)

Vulnerability from cvelistv5 – Published: 2026-06-25 12:24 – Updated: 2026-06-25 13:44

Title

EDNS options smuggling

Summary

An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS option(s) that DNSdist did not filter.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-25 13:44 UTC

CWE

Misinterpretation of Input
CWE-115 - Misinterpretation of Input

Assigner

OX mitre root Scorecard

References

1 reference

URL	Tags
https://www.dnsdist.org/security-advisories/power…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	DNSdist	Affected: 1.9.0 , < 1.9.15 (semver) Affected: 2.0.0 , < 2.0.7 (semver)

Date Public

2026-06-24 22:00

Credits

Vitaly Simonovich

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42004",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:44:02.980438Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-115",
                "description": "CWE-115 Misinterpretation of Input",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:44:07.962Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "EDNS processing"
          ],
          "packageName": "dnsdist",
          "product": "DNSdist",
          "programFiles": [
            "dnsdist-ecs.cc"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "1.9.15",
              "status": "affected",
              "version": "1.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "2.0.7",
              "status": "affected",
              "version": "2.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Vitaly Simonovich"
        }
      ],
      "datePublic": "2026-06-24T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn attacker can send a crafted EDNS OPT record that will be ignored by DNSdist\u2019s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS option(s) that DNSdist did not filter.\u003c/p\u003e"
            }
          ],
          "value": "An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist\u2019s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS option(s) that DNSdist did not filter."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Misinterpretation of Input",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T12:24:20.140Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "EDNS options smuggling",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-42004",
    "datePublished": "2026-06-25T12:24:20.140Z",
    "dateReserved": "2026-04-23T11:15:21.198Z",
    "dateUpdated": "2026-06-25T13:44:07.962Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42005 (GCVE-0-2026-42005)

Vulnerability from cvelistv5 – Published: 2026-06-25 11:57 – Updated: 2026-06-25 13:04

Title

Insufficient input validation of internal web server

Summary

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-25 13:03 UTC

CWE

Allocation of Resources Without Limits or Throttling
CWE-400 - Uncontrolled Resource Consumption

Assigner

OX mitre root Scorecard

References

1 reference

URL	Tags
https://docs.powerdns.com/authoritative/security-…

Impacted products

1 product

Vendor	Product	Version
PowerDNS	Authoritative	Affected: 4.9.0 , < 4.9.16 (semver) Affected: 5.0.0 , < 5.0.6 (semver) Affected: 5.1.0 , < 5.1.2 (semver)

Date Public

2026-06-10 22:00

Credits

ilya rozentsvaig

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-42005",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-25T13:03:44.259390Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-25T13:04:12.854Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://repo.powerdns.com/",
          "defaultStatus": "unaffected",
          "modules": [
            "YaHTTP"
          ],
          "packageName": "pdns",
          "product": "Authoritative",
          "programFiles": [
            "ext/yahttp/yahttp/reqresp.cpp"
          ],
          "repo": "https://github.com/PowerDNS/pdns",
          "vendor": "PowerDNS",
          "versions": [
            {
              "lessThan": "4.9.16",
              "status": "affected",
              "version": "4.9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "5.0.6",
              "status": "affected",
              "version": "5.0.0",
              "versionType": "semver"
            },
            {
              "lessThan": "5.1.2",
              "status": "affected",
              "version": "5.1.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "ilya rozentsvaig"
        }
      ],
      "datePublic": "2026-06-10T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An attacker can send a web request that causes unlimited memory \nallocation in the internal web server, leading to a denial of service. \nThe internal web server is disabled by default."
            }
          ],
          "value": "An attacker can send a web request that causes unlimited memory \nallocation in the internal web server, leading to a denial of service. \nThe internal web server is disabled by default."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-25T11:57:16.346Z",
        "orgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
        "shortName": "OX"
      },
      "references": [
        {
          "url": "https://docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-07.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Insufficient input validation of internal web server",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8ce71d90-2354-404b-a86e-bec2cc4e6981",
    "assignerShortName": "OX",
    "cveId": "CVE-2026-42005",
    "datePublished": "2026-06-25T11:57:16.346Z",
    "dateReserved": "2026-04-23T11:15:21.199Z",
    "dateUpdated": "2026-06-25T13:04:12.854Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2026:23123-1

CVE-2026-40011 (GCVE-0-2026-40011)

CVE-2026-40208 (GCVE-0-2026-40208)

CVE-2026-40209 (GCVE-0-2026-40209)

CVE-2026-40210 (GCVE-0-2026-40210)

CVE-2026-40211 (GCVE-0-2026-40211)

CVE-2026-42004 (GCVE-0-2026-42004)

CVE-2026-42005 (GCVE-0-2026-42005)

Tags

Sightings

Nomenclature

Related by attack behaviour