CVE-2026-27853 — Out-of-bounds Write in Dnsdist
Severity
5.9MEDIUMNVD
EPSS
0.0%
top 93.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 31
Description
An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. In some cases the rewritten packet might become larger than the initial response and even exceed 65535 bytes, potentially leading to a crash resulting in denial of service.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6
Affected Packages2 packages
🔴Vulnerability Details
3OSV▶
CVE-2026-27853: An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSRespo↗2026-03-31
GHSA▶
GHSA-w68q-j3pw-29rg: An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSRespo↗2026-03-31
📋Vendor Advisories
1Debian▶
CVE-2026-27853: dnsdist - An attacker might be able to trigger an out-of-bounds write by sending crafted D...↗2026