Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/dnsdist@1.9.9-1?distro=trixie
purl pkg:deb/debian/dnsdist@1.9.9-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-nscz-bycw-7bhk When DNSdist is configured to provide DoH via the nghttp2 provider, an attacker can cause a denial of service by crafting a DoH exchange that triggers an illegal memory access (double-free) and crash of DNSdist, causing a denial of service. The remedy is: upgrade to the patched 1.9.9 version. A workaround is to temporarily switch to the h2o provider until DNSdist has been upgraded to a fixed version. We would like to thank Charles Howes for bringing this issue to our attention. CVE-2025-30194

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T09:46:45.852162+00:00 Debian Importer Fixing VCID-nscz-bycw-7bhk https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T06:31:52.088703+00:00 Debian Importer Fixing VCID-nscz-bycw-7bhk https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-02T17:16:58.027183+00:00 Debian Importer Fixing VCID-nscz-bycw-7bhk https://security-tracker.debian.org/tracker/data/json 38.1.0