CVE-2026-40011

3.7 Faible

Publiée le 25/06/2026 à 15:16 · Modifiée le 25/06/2026 à 18:00 · Analyse NVD reportée · Source : security@open-xchange.com

Description

An attacker sending a large number of crafted DNS queries might be able to trigger a dynamic block being inserted with a value causing invalid output to be produced in the prometheus endpoint. The prometheus endpoint will then be rejected by the scraper until the dynamic block expires.

Traduire en français

Produits concernés

PowerDNS DNSdist

Scores CVSS

Version	Score	Source	Vecteur
3.1	3.7 Faible	security@open-xchange.com	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N`

Faiblesses (CWE)

CWE-116

Références

https://www.dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2026-09.html

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories