Medium severity4.3NVD Advisory· Published Jun 25, 2026· Updated Jun 25, 2026

CVE-2026-42005

Description

An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default.

Affected products

osv-coords
pkg:rpm/opensuse/dnsdist&distro=openSUSE%20Tumbleweed
Range: < 2.0.7-1.1

Patches

Vulnerability mechanics

References

docs.powerdns.com/authoritative/security-advisories/powerdns-advisory-powerdns-2026-07.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000