p PatchFirst

CVE-2026-42001

CVE-2026-42001 · Insufficient Validation of Autoprimary SOA Queries

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Insufficient Validation of Autoprimary SOA Queries

CVSS 7.5 · High · EPSS 0.8% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • authoritative

    Versions
    • ≥ 4.9.0, < 4.9.15: Affected (semver)
    • ≥ 5.0.0, < 5.0.5: Affected (semver)

    Update to 4.9.15; Update to 5.0.5

  • pdns Debian:12

    Versions
    • 4.7.3-2
    • 4.8.0-1
    • 4.8.0-2
    • 4.8.1-1
    • 4.8.1-2
    • 4.8.2-1
    • 4.8.2-2
    • 4.8.3-1
    • 4.8.3-2
    • 4.8.3-3
    • 4.8.3-4
    • 4.9.0-1
    • 4.9.0-2
    • 4.9.1-1
    • 4.9.1-2
    • 4.9.1-3
    • 4.9.2-1
    • 4.9.2-2
    • 4.9.3-1
    • 4.9.3-2
    • 4.9.3-3
    • 4.9.4-1
    • 4.9.4-2
    • 4.9.7-1
    • 5.0.0-1
    • 5.0.0-2
    • 5.0.1-1
    • 5.0.2-1
    • 5.0.3-1
    • 5.0.4-1
    • 5.0.5-1
    • 5.0.5-2
    • 5.0.5-3
    • 5.0.5-4
    • 5.1.0-1
    • 5.1.1-1
    • 5.1.1-2
    • 5.1.1-3
    • 5.1.2-1
    • 5.1.3-1
    • 5.1.4-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pdns Debian:13

    Versions
    • 4.9.14-0+deb13u1
    • 4.9.7-1
    Affected ranges
    • ECOSYSTEM: < 4.9.15-0+deb13u1

    Update to 4.9.15-0+deb13u1

  • pdns Debian:14

    Versions
    • 4.9.7-1
    • 5.0.0-1
    • 5.0.0-2
    • 5.0.1-1
    • 5.0.2-1
    • 5.0.3-1
    • 5.0.4-1
    Affected ranges
    • ECOSYSTEM: < 5.0.5-1

    Update to 5.0.5-1

  • pdns Ubuntu:Pro:16.04:LTS

    Versions
    • 3.4.5-1build2
    • 3.4.6-2
    • 3.4.6-3
    • 3.4.7-1
    • 3.4.7-2
    • 4.0.0~alpha1-1
    • 4.0.0~alpha2-2
    • 4.0.0~alpha2-3
    • 4.0.0~alpha2-3build1
    • 4.0.0~alpha2-3ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pdns Ubuntu:Pro:18.04:LTS

    Versions
    • 4.0.4-2
    • 4.0.4-2build1
    • 4.0.5-1
    • 4.1.0-1
    • 4.1.0-2
    • 4.1.0-2build1
    • 4.1.1-1
    • 4.1.1-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pdns Ubuntu:Pro:20.04:LTS

    Versions
    • 4.1.6-3build1
    • 4.2.0-1
    • 4.2.1-1
    • 4.2.1-1build1
    • 4.2.1-1build2
    • 4.2.1-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pdns Ubuntu:Pro:22.04:LTS

    Versions
    • 4.4.1-1build1
    • 4.4.1-3
    • 4.4.1-4
    • 4.5.2-1build1
    • 4.5.3-1
    • 4.5.3-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pdns Ubuntu:24.04:LTS

    Versions
    • 4.8.1-1build1
    • 4.8.3-2
    • 4.8.3-2build1
    • 4.8.3-3
    • 4.8.3-4
    • 4.8.3-4build2
    • 4.8.3-4build3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pdns Ubuntu:25.10

    Versions
    • 4.9.4-2
    • 4.9.7-1
    • 4.9.7-1build2
    • 5.0.0-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pdns Ubuntu:26.10

    Versions
    • 5.0.2-1build1
    • 5.0.5-4
    • 5.1.0-1
    • 5.1.1-1
    • 5.1.1-2
    • 5.1.1-3
    • 5.1.2-1
    • 5.1.3-1
    • 5.1.4-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • pdns Ubuntu:26.04:LTS

    Versions
    • 5.0.0-2
    • 5.0.1-1
    • 5.0.2-1
    • 5.0.2-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →