| Package | Affected versions | Patched versions |
|---|---|---|
| dnsdist | ≥ 1.9.0, < 1.9.13≥ 2.0.0, < 2.0.4 | 1.9.132.0.4 |
A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newServer or auto_upgrade (YAML) settings. DDR upgrade is not enabled by default.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free