CVE-2026-24028 | PowerDNS DNSdist up to 1.9.11/2.0.2 newDNSPacketOverlay out-of-bounds

A vulnerability marked as problematic has been reported in PowerDNS DNSdist up to 1.9.11/2.0.2. Affected by this vulnerability is the function newDNSPacketOverlay. The manipulation leads to out-of-bounds read.

This vulnerability is referenced as CVE-2026-24028. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.