Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-33254

Resource exhaustion via DoQ/DoH3 connections

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OX

Description

An attacker can create a large number of concurrent DoQ or DoH3 connections, causing unlimited memory allocation in DNSdist and leading to a denial of service. DOQ and DoH3 are disabled by default.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PowerDNS DNSdist

Default version status: unaffected

  • 1.9.0 to < 1.9.13affected
  • 2.0.0 to < 2.0.4affected

References