Cette page suit l'état du correctif pour Alpine Linux. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-12245 →
ALPINE-CVE-2026-12245
NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be trigge...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered trivially by sending a DNS query over a DoT connection, and closing the connection without reading the response.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Alpine:v3.24
nsd
[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.0"},{"fixed":"4.14.3-r0"}]}]
Références
- advisory security.alpinelinux.org