Medium severity4.3NVD Advisory· Published Jun 25, 2026· Updated Jun 25, 2026

CVE-2026-42005

Description

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.

Affected products

osv-coords2 versions
pkg:rpm/opensuse/dnsdist&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/dnsdist&distro=openSUSE%20Leap%2016.0
< 2.0.7-1.1+ 1 more
- (no CPE)range: < 2.0.7-1.1
- (no CPE)range: < 1.9.15-160000.1.1

Patches

Vulnerability mechanics

References

docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-07.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000