CVE-2026-42387: Insufficient input validation in ZoneToCache
A malicious authoritative server can send a crafted zone via the ZoneToCache function that leads to a crash of the Recursor due to insuffcient input validation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/pdns-recursorto a version that resolves this vulnerability.Fixed in 5.4.3-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-42387?
The severity of CVE-2026-42387 is medium with a score of 5.9.
What vulnerability does CVE-2026-42387 pertain to?
CVE-2026-42387 pertains to insufficient input validation in the ZoneToCache function of ISC BIND Recursor.
How can I fix CVE-2026-42387?
To fix CVE-2026-42387, update to the latest version of ISC BIND Recursor that addresses the insufficient input validation issue.
What impact does CVE-2026-42387 have on system stability?
CVE-2026-42387 can lead to a crash of the Recursor if a malicious authoritative server sends a crafted zone.
Who is affected by CVE-2026-42387?
CVE-2026-42387 affects users of ISC BIND Recursor due to its insufficient input validation vulnerability.