DEBIAN-CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

UBUNTU-CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

Linux Distros Unpatched Vulnerability : CVE-2026-81928

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigda...

CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

CVE-2026-81928: Uncontrolled Recursion

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

CVE-2026-81928 Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

CVE-2026-81928

The Net::DNS Perl module (versions before 1.57 ) is vulnerable to a Denial of Service (DoS) via memory exhaustion . The root cause is unbounded recursion in sig_data occurring when re-encoding a message that contains a misplaced TSIG record in the answer or authority section. While the decoder wa...

CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

PT-2026-84543

Name of the Vulnerable Software and Affected Versions Net::DNS versions prior to 1.57 Description Memory exhaustion can occur due to unbounded recursion in the sig data function when re-encoding a message containing a misplaced TSIG Transaction Signature record. The sig data function signs a...

Amazon Linux 2 : perl-Net-DNS, --advisory ALAS2-2026-3855 (ALAS-2026-3855)

The version of perl-Net-DNS installed on the remote host is prior to 0.72-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3855 advisory. Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains...

Amazon Linux 2023 : perl-Net-DNS, perl-Net-DNS-Nameserver, perl-Net-DNS-tests (ALAS2023-2026-2046)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2046 advisory. Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EXTENDEDERROR::decompose parses the EXTRA-TEXT field of an EDNS...

Important: perl-Net-DNS

Issue Overview: Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. Net::DNS::DomainName::decode follows RFC 1035 compression pointers by recursing into itself with no depth limit. It is possible to construct a name which saturates the call sta...

Important: perl-Net-DNS

Issue Overview: Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR. Net::DNS::RR::OPT::EXTENDEDERROR::decompose parses the EXTRA-TEXT field of an EDNS EXTENDED-ERROR option RFC 8914 by tokenising the raw bytes and passing the result to Perl's eval...

SUSE SLED15 / SLES15 Security Update : perl-Net-DNS (SUSE-SU-2026:3456-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3456-1 advisory. This update for perl-Net-DNS fixes the following issue - CVE-2026-64194: RFC 1035 compression pointers are followed via...

Security update for perl-Net-DNS

This update for perl-Net-DNS fixes the following issue: CVE-2026-64194: RFC 1035 compression pointers are followed via recursion with no depth limit established, which can lead to DoS when specially crafted DNS packets are parsed bsc1272214. Patch Instructions: To install this SUSE update use the...

SUSE SLES12 Security Update : perl-Net-DNS (SUSE-SU-2026:3431-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3431-1 advisory. This update for perl-Net-DNS fixes the following issue - CVE-2026-64194: RFC 1035 compression pointers are followed via recursion with no depth limit...

Security update for perl-Net-DNS

This update for perl-Net-DNS fixes the following issue CVE-2026-64194: RFC 1035 compression pointers are followed via recursion with no depth limit established, which can lead to DoS when specially crafted DNS packets are parsed bsc1272214. Patch Instructions: To install this SUSE update use the...

SUSE-SU-2026:3431-1 Security update for perl-Net-DNS

This update for perl-Net-DNS fixes the following issue - CVE-2026-64194: RFC 1035 compression pointers are followed via recursion with no depth limit established, which can lead to DoS when specially crafted DNS packets are parsed bsc1272214...