Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service. In setups with a large quantity of memory available this usually results in an exception and the QUIC connection is properly closed, but in some cases the system might enter an out-of-memory state instead and terminate the process.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-31 | 1 | Disclosure1 |
| 2026-04-10 | 1 | Patch1 |
| 2026-04-14 | 1 | Patch1 |
🚨 #DNS admins: A single crafted QUIC packet can crash your load balancer (CVE-2026-24030). Patch or mitigate now. Here’s the 60-second iptables fix → https://tinyurl.com/47b2f936 #Fedora https://t.co/sakTcPl1z0
Post summary
The tweet alerts DNS admins that CVE‑2026‑24030 allows a crafted QUIC packet to crash load balancers and urges immediate patching or a 60‑second iptables fix, which is linked in the post.
CVE-2026-24030 An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of servic… https://www.cve.org/CVERecord?id=CVE-2026-24030
Post summary
The CVE details a memory allocation flaw in DNSdist that could cause a denial of service when handling DNS over QUIC or HTTP/3, but no PoC, exploit, patch, or active exploitation evidence is provided.
🚨 CVE-2026-24030: DNSdist DoS via QUIC/HTTP3 https://www.sentinelone.com/vulnerability-database/cve-2026-24030/ A flaw in DNSdist lets attackers exhaust memory by sending crafted DNS over QUIC or HTTP/3 requests. No auth needed. Under load or low memory, it can trigger OOM and crash the service, disrupting DNS resolution. If you’re running DoQ or DoH3, patch now or consider disabling them temporarily. Monitor memory spikes, restarts, and unusual QUIC/HTTP3 traffic patterns. #DNS #DNSSecurity #CyberSecurity #InfoSec #Vulnerability
Post summary
CVE‑2026‑24030 is a DNSdist denial‑of‑service flaw via QUIC/HTTP3 that can cause OOM crashes; administrators should apply patches or disable DoQ/DoH3 to mitigate.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | powerdns | dnsdist | - | - | - |