CVE-2026-42387

Published: Jun 25, 2026Modified: Jun 25, 2026Deferred

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: security@open-xchange.com (Secondary)

Description

A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recursor due to insuffcient input validation.

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-powerdns-2026-08.html

Source: security@open-xchange.com

Timeline

No history available yet.