VDB

RHSA-2026:53402

RHSA-2026:53402 PUBLISHED CVSS 7.5 HIGH

Record from redhat · Published August 11, 2026

A flaw was found in ldns. When applications use ldns as a resolver over User Datagram Protocol (UDP), it fails to properly match the query's destination address and port with the response's source address and port. Additionally, the query ID and question are not matched with the response. This vulnerability allows a remote attacker to perform off-path poisoning attacks, potentially leading to DNS cache poisoning and redirection to malicious resources.

Risk scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

VendorProductVersions
Red Hatperl-ldns-debuginfo-0:1.8.3-18.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatperl-ldns-0:1.8.3-18.el10_0.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatldns-utils-debuginfo-0:1.8.3-18.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatldns-debuginfo-0:1.8.3-18.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatldns-0:1.8.3-18.el10_0.1.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatldns-debugsource-0:1.8.3-18.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatpython3-ldns-debuginfo-0:1.8.3-18.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatldns-debuginfo-0:1.8.3-18.el10_0.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatperl-ldns-debuginfo-0:1.8.3-18.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatldns-utils-0:1.8.3-18.el10_0.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatldns-utils-debuginfo-0:1.8.3-18.el10_0.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatpython3-ldns-0:1.8.3-18.el10_0.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatpython3-ldns-debuginfo-0:1.8.3-18.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatperl-ldns-debuginfo-0:1.8.3-18.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatldns-debugsource-0:1.8.3-18.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatperl-ldns-0:1.8.3-18.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatpython3-ldns-0:1.8.3-18.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatldns-debugsource-0:1.8.3-18.el10_0.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatldns-0:1.8.3-18.el10_0.1.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)0:1.8.3-18.el10_0.1
Red Hatldns-debugsource-0:1.8.3-18.el10_0.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)0:1.8.3-18.el10_0.1

…and 42 more

Timeline

  • Aug 11, 2026 CVE Published
  • Aug 12, 2026 CVE Updated
  • Aug 12, 2026 Distribution Patch (2 in total, the first dated here)
  • Aug 12, 2026 Security Advisory (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2026:53402
vulnetix vdb fixes RHSA-2026:53402

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2026%3A53402/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›