VDB

RHSA-2026:50108

RHSA-2026:50108 PUBLISHED CVSS 9.300000190734863 CRITICAL

A flaw was found in ldns. When applications use ldns as a resolver over User Datagram Protocol (UDP), it fails to properly match the query's destination address and port with the response's source address and port. Additionally, the query ID and question are not matched with the response. This vulnerability allows a remote attacker to perform off-path poisoning attacks, potentially leading to DNS cache poisoning and redirection to malicious resources.

Risk Scores

CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
Red Hatldns-debugsource-0:1.7.1-12.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1
Red Hatldns-debugsource-0:1.7.1-12.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1
Red Hatperl-ldns-0:1.7.1-12.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)0:1.7.1-12.el9_8.1
Red Hatldns-debuginfo-0:1.7.1-12.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1
Red Hatperl-ldns-debuginfo-0:1.7.1-12.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)0:1.7.1-12.el9_8.1
Red Hatperl-ldns-debuginfo-0:1.7.1-12.el9_8.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)0:1.7.1-12.el9_8.1
Red Hatldns-0:1.7.1-12.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1
Red Hatldns-utils-debuginfo-0:1.7.1-12.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1
Red Hatldns-utils-debuginfo-0:1.7.1-12.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1
Red Hatldns-debuginfo-0:1.7.1-12.el9_8.1.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1
Red Hatldns-devel-0:1.7.1-12.el9_8.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)0:1.7.1-12.el9_8.1
Red Hatldns-0:1.7.1-12.el9_8.1.src as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1
Red Hatldns-0:1.7.1-12.el9_8.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1
Red Hatperl-ldns-debuginfo-0:1.7.1-12.el9_8.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1
Red Hatldns-debuginfo-0:1.7.1-12.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1
Red Hatldns-utils-debuginfo-0:1.7.1-12.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1
Red Hatldns-debugsource-0:1.7.1-12.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1
Red Hatpython3-ldns-0:1.7.1-12.el9_8.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)0:1.7.1-12.el9_8.1
Red Hatperl-ldns-0:1.7.1-12.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)0:1.7.1-12.el9_8.1
Red Hatperl-ldns-debuginfo-0:1.7.1-12.el9_8.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)0:1.7.1-12.el9_8.1

…and 48 more

Timeline

  • Aug 4, 2026 CVE Published
  • Aug 12, 2026 CVE Updated
  • Aug 12, 2026 Distribution Patch
  • Aug 12, 2026 Distribution Patch
  • Aug 12, 2026 Security Advisory
  • Aug 12, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›