Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-42388

Fixed in a distro release EPSS <1%CVSS 5.9

Incomplete validation of the SOA record present in a catalog zone might lead to a crash.

Published 2026-06-25 · CVE record · OSV

Products: powerdns recursor

Distro releases

ReleasePackageFixed in
Debian 12pdns-recursorno fix
Debian 13pdns-recursor5.2.11-0+deb13u1
Debian 14pdns-recursor5.4.3-1
Ubuntu 24.04 LTSpdns-recursorno fix
Ubuntu 25.10pdns-recursorno fix
Ubuntu 26.04 LTSpdns-recursorno fix
Ubuntu 26.10pdns-recursorno fix
Ubuntu Pro 16.04 LTSpdns-recursorno fix
Ubuntu Pro 18.04 LTSpdns-recursorno fix
Ubuntu Pro 20.04 LTSpdns-recursorno fix
Ubuntu Pro 22.04 LTSpdns-recursorno fix