https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:24:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-330228 EUVD-2026-330228 https://cve.radiocsirt.org/vuln/euvd-2026-330228 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40211 <p>An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.</p> <p>An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40211 https://cve.radiocsirt.org/vuln/ghsa-8mqg-g8g6-fvw6 <p>An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.</p> <p>An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-8mqg-g8g6-fvw6 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11411-1 <p>dnsdist-2.0.7-1.1 on GA media</p> <p>dnsdist-2.0.7-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11411-1 https://cve.radiocsirt.org/vuln/suse-su-2026:23123-1 <p>Security update for dnsdist</p> <p>Security update for dnsdist</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23123-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40211 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: dnsdist, Ubuntu:Pro:18.04:LTS: dnsdist, Ubuntu:Pro:20.04:LTS: dnsdist, Ubuntu:Pro:22.04:LTS: dnsdist, Ubuntu:Pro:24.04:LTS: dnsdist, Ubuntu:25.10: dnsdist, Ubuntu:26.04:LTS: dnsdist</p> <p>An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: dnsdist, Ubuntu:Pro:18.04:LTS: dnsdist, Ubuntu:Pro:20.04:LTS: dnsdist, Ubuntu:Pro:22.04:LTS: dnsdist, Ubuntu:Pro:24.04:LTS: dnsdist, Ubuntu:25.10: dnsdist, Ubuntu:26.04:LTS: dnsdist</p> <p>An attacker can send crafted DNS over HTTP/3 queries, triggering an exception that prevents some buffer from being freed right away. The buffer will be freed at the end of the QUIC connection, but on some setups it might be possible to open enough concurrent DoH3 streams to trigger an out-of-memory condition, resulting in a denial of service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-40211 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2091 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PowerDNS ausnutzen, um Denial-of-Service-Zustände herbeizuführen, DNS-Caches zu manipulieren, Sicherheitsprüfungen zu umgehen, vertrauliche Informationen offenzulegen, DNSSEC-Validierungen zu beeinträchtigen oder die Integrität und Verfügbarkeit der DNS-Auflösung zu beeinflussen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in PowerDNS ausnutzen, um Denial-of-Service-Zustände herbeizuführen, DNS-Caches zu manipulieren, Sicherheitsprüfungen zu umgehen, vertrauliche Informationen offenzulegen, DNSSEC-Validierungen zu beeinträchtigen oder die Integrität und Verfügbarkeit der DNS-Auflösung zu beeinflussen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2091