Cette page suit l'état du correctif pour Alpine Linux. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-81736 →

ALPINE-CVE-2026-81736

If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend dispropor...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response.
This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Alpine:v3.22 bind

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.29-r0"}]}]

Alpine:v3.23 bind

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.29-r0"}]}]

Alpine:v3.24 bind

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.29-r0"}]}]

Références

advisory security.alpinelinux.org