The CVE outlines an out-of-bounds read that can occur when SetMacAddrAction is invoked in PowerDNS DNSdist. This overflow may allow an attacker to read uninitialized memory and send it over the network, potentially revealing sensitive data, and in some cases could cause the DNSdist process to crash, resulting in denial of service.

Affected products include PowerDNS DNSdist. The specific functionality is SetMacAddrAction; product versions are not listed in the advisory, so administrators should verify their current DNSdist release against the vendor's patch release.

The CVSS score of 4.8 indicates moderate severity, and the vulnerability is not listed in the CISA KEV catalog, with no EPSS score available, implying limited evidence of active exploitation. The likely attack surface is the network interface where DNSdist processes client requests. An attacker could trigger the vulnerability by sending crafted data that causes the out-of-bounds read, potentially exposing memory contents or causing a crash that leads to service disruption.