Threats affecting pkg:rpm/suse/dnsdist

Multiple security vulnerabilities were fixed in dnsdist with the update to version 1.9.15. These include issues causing invalid output in the Prometheus endpoint, delays in processing DNS over HTTP/3 queries, stuck outgoing TCP connections, out-of-bounds reads leading to crashes or memory leaks, exceptions causing out-of-memory conditions, improper handling of crafted EDNS OPT records, and denial-of-service via unlimited memory allocation in the internal web server.

A security update for dnsdist addresses multiple vulnerabilities including injection of HTML content, CORS misconfiguration leading to information disclosure, out-of-bounds reads and writes, denial of service via excessive memory allocation or crafted queries, use-after-free conditions, and input validation issues in the internal webserver. The update fixes these issues by upgrading dnsdist to version 1.9.13.