Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-40209 →

DEBIAN-CVE-2026-40209

An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by se...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a denial of service if there is a limit to the number of concurrent connections to this backend, or if the process runs out of file descriptors.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 dnsdist

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 dnsdist

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.15-0+deb13u1"}]}]

Debian:14 dnsdist

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-1"}]}]

Références

advisory security-tracker.debian.org