CVE-2026-33609
CVE-2026-33609 · LDAP DN injection
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.
CVSS 5.3 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
authoritative
- Versions
- ≥ 5.0.0, < 5.0.4: Affected (semver)
- ≥ 4.9.0, < 4.9.14: Affected (semver)
Update to 4.9.14; Update to 5.0.4
pdns Debian:12
- Versions
- 4.7.3-2
- 4.8.0-1
- 4.8.0-2
- 4.8.1-1
- 4.8.1-2
- 4.8.2-1
- 4.8.2-2
- 4.8.3-1
- 4.8.3-2
- 4.8.3-3
- 4.8.3-4
- 4.9.0-1
- 4.9.0-2
- 4.9.1-1
- 4.9.1-2
- 4.9.1-3
- 4.9.2-1
- 4.9.2-2
- 4.9.3-1
- 4.9.3-2
- 4.9.3-3
- 4.9.4-1
- 4.9.4-2
- 4.9.7-1
- 5.0.0-1
- 5.0.0-2
- 5.0.1-1
- 5.0.2-1
- 5.0.3-1
- 5.0.4-1
- 5.0.5-1
- 5.0.5-2
- 5.0.5-3
- 5.0.5-4
- 5.1.0-1
- 5.1.1-1
- 5.1.1-2
- 5.1.1-3
- 5.1.2-1
- 5.1.3-1
- 5.1.4-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns Debian:13
- Versions
- 4.9.7-1
- Affected ranges
- ECOSYSTEM: < 4.9.14-0+deb13u1
Update to 4.9.14-0+deb13u1
pdns Debian:14
- Versions
- 4.9.7-1
- 5.0.0-1
- 5.0.0-2
- 5.0.1-1
- 5.0.2-1
- 5.0.3-1
- Affected ranges
- ECOSYSTEM: < 5.0.4-1
Update to 5.0.4-1
pdns Ubuntu:Pro:16.04:LTS
- Versions
- 3.4.5-1build2
- 3.4.6-2
- 3.4.6-3
- 3.4.7-1
- 3.4.7-2
- 4.0.0~alpha1-1
- 4.0.0~alpha2-2
- 4.0.0~alpha2-3
- 4.0.0~alpha2-3build1
- 4.0.0~alpha2-3ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns Ubuntu:Pro:18.04:LTS
- Versions
- 4.0.4-2
- 4.0.4-2build1
- 4.0.5-1
- 4.1.0-1
- 4.1.0-2
- 4.1.0-2build1
- 4.1.1-1
- 4.1.1-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns Ubuntu:Pro:20.04:LTS
- Versions
- 4.1.6-3build1
- 4.2.0-1
- 4.2.1-1
- 4.2.1-1build1
- 4.2.1-1build2
- 4.2.1-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns Ubuntu:Pro:22.04:LTS
- Versions
- 4.4.1-1build1
- 4.4.1-3
- 4.4.1-4
- 4.5.2-1build1
- 4.5.3-1
- 4.5.3-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns Ubuntu:24.04:LTS
- Versions
- 4.8.1-1build1
- 4.8.3-2
- 4.8.3-2build1
- 4.8.3-3
- 4.8.3-4
- 4.8.3-4build2
- 4.8.3-4build3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns Ubuntu:25.10
- Versions
- 4.9.4-2
- 4.9.7-1
- 4.9.7-1build2
- 5.0.0-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns Ubuntu:26.10
- Versions
- 5.0.2-1build1
- 5.0.5-4
- 5.1.0-1
- 5.1.1-1
- 5.1.1-2
- 5.1.1-3
- 5.1.2-1
- 5.1.3-1
- 5.1.4-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns Ubuntu:26.04:LTS
- Versions
- 5.0.0-2
- 5.0.1-1
- 5.0.2-1
- 5.0.2-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published