DNSdist -- vulnerabilities

2026-06-29 · CVE-2026-40011, CVE-2026-42004, CVE-2026-42005, CVE-2026-40208, CVE-2026-40209, CVE-2026-40210, CVE-2026-40211 · VuXML entry

The DNSdist team reports: CVE-2026-40011: Prometheus denial of service via crafted DNS queries CVE-2026-42004: EDNS options smuggling CVE-2026-42005: Insufficient input validation of internal web server CVE-2026-40208: Denial of service via DoH3 queries CVE-2026-40209: Denial of service via IXFR queries CVE-2026-40210: Out-of-bounds read in SetMacAddrAction CVE-2026-40211: Denial of service via crafted DoH3 queries …

Affected versions

• dnsdist < 2.0.7

By system

0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.