Out-of-Bounds Write Vulnerability in DNSdist by PowerDNS

CVE-2026-27853

What is CVE-2026-27853?

A flaw in DNSdist allows an attacker to exploit an out-of-bounds write condition by sending specially crafted DNS responses. This can occur through the DNSQuestion:changeName or DNSResponse:changeName Lua methods. The manipulation can lead to packets exceeding the maximum allowed size of 65535 bytes, resulting in the potential crashing of the service and causing denial of service. Administrators are advised to review their DNSdist configurations and apply recommended updates to mitigate this risk.

References