Skip to content
CVE PROGRAM SOURCE RECORD3.7 Low

CVE-2026-42004

EDNS options smuggling

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OX

Description

An attacker can send a crafted EDNS OPT record that will be ignored by DNSdist’s filtering rules, but will be rewritten as a valid OPT record when EDNS Client Subnet is inserted, causing the backend to see the EDNS option(s) that DNSdist did not filter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PowerDNS DNSdist

Default version status: unaffected

  • 1.9.0 to < 1.9.15affected
  • 2.0.0 to < 2.0.7affected

References