Incomplete domain name sanitization during (CVE-2026-33608)

Résumé

Incomplete domain name sanitization during

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an invalid one, leading to the backend no longer able to run on the next restart, requiring manual operation to fix it.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2026-33608 pdns
Ubuntu UBUNTU-CVE-2026-33608 pdns

Références

advisory docs.powerdns.com
advisory github.com
advisory nvd.nist.gov
package github.com
web repo.powerdns.com