CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

DSA-6419-1 dnsdist - security update

unknownCVE-2026-52682
A vulnerability was discovered in the dnsdist DNS loadbalancer, which may result in denial of service (increased memory and CPU usage) when processing a specially crafted DNS packet. https://security-tracker.debian.org/tracker/DSA-6419-1

CSIRTS triage

What
A specially crafted DNS packet causes increased memory and CPU usage in the DNS load balancer.
Who is affected
Deployments of dnsdist running vulnerable versions.
Urgency
Moderate; denial of service via resource exhaustion is possible but not actively exploited.
Action
Apply the security update from Debian (DSA-6419-1) or upgrade to the patched version from PowerDNS.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch dnsdist

Get an email when a new dnsdist advisory drops — max one per day, one-click unsubscribe.

Details

Source
Debian Security Advisories (INTL · vendor-psirt · site)
Severity
unknown
Published
2026-08-08
Exploitation
Not in CISA KEV at last sync

Original advisory: https://lists.debian.org/debian-security-announce/2026/msg00330.html

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-52682coverage & exploitation statusNVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

More from Debian Security Advisories