https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T04:54:41.914267+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-11269 bdu:2025-11269 2026-10-17T04:54:41.921260+00:00 bdu:2025-11269 https://cve.radiocsirt.org/vuln/cleanstart-2024-od86351 CLEANSTART-2024-OD86351 — When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS… 2026-10-17T04:54:41.921317+00:00

Affected: CleanStart: dnsdist

Security vulnerability affects the dnsdist package. When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer (AXFR or IXFR) over DNS over HTTPS, causing the process to sto....

 https://cve.radiocsirt.org/vuln/euvd-2026-217268 EUVD-2026-217268 2026-10-17T04:54:41.921393+00:00 EUVD-2026-217268 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25581 fkie_cve-2024-25581 2026-10-17T04:54:41.921424+00:00

When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer (AXFR or IXFR) over DNS over HTTPS, causing the process to stop and thus leading to a Denial of Service. DNS over HTTPS is not enabled by default, and backends are using plain DNS (Do53) by default.

 https://cve.radiocsirt.org/vuln/ghsa-55g9-rgmx-hvww GHSA-55g9-rgmx-hvww 2026-10-17T04:54:41.921473+00:00

When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer (AXFR or IXFR) over DNS over HTTPS, causing the process to stop and thus leading to a Denial of Service. DNS over HTTPS is not enabled by default, and backends are using plain DNS (Do53) by default.

 https://cve.radiocsirt.org/vuln/gsd-2024-25581 gsd-2024-25581 2026-10-17T04:54:41.921510+00:00 gsd-2024-25581 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13958-1 openSUSE-SU-2024:13958-1 — dnsdist-1.9.4-1.1 on GA media 2026-10-17T04:54:41.921534+00:00

dnsdist-1.9.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1094 WID-SEC-W-2024-1094 — PowerDNS: Schwachstelle ermöglicht Denial of Service 2026-10-17T04:54:41.921568+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in PowerDNS ausnutzen, um einen Denial of Service Angriff durchzuführen.