Out-of-Bounds Read Vulnerability in PowerDNS from PowerDNS

CVE-2026-24028

What is CVE-2026-24028?

An attacker can exploit a vulnerability in PowerDNS by sending a specially crafted DNS response packet. This manipulation targets the parsing function responsible for handling DNS packets with custom Lua code. If successful, this can lead to an out-of-bounds read, which may result in a denial of service by crashing the application or potentially accessing sensitive and unrelated memory. Thus, the exploitation of this vulnerability poses a significant risk to the integrity and confidentiality of the system.

References