CVE-2026-33609
LDAP DN injection
Summary
LDAP DN injection
Original description
The description as published by the source.
Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-33609 pdns
- Ubuntu UBUNTU-CVE-2026-33609 pdns
References
- advisory docs.powerdns.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web repo.powerdns.com