BSD PortsPowerDNS -- Multiple vulnerabilities
· CVE-2026-41999, CVE-2026-42000, CVE-2026-42001, CVE-2026-42002, CVE-2026-42396 · VuXML entry
PowerDNS Team reports: 2025-07: Internal logic flaw in cache management can lead to a denial of service in Recursor When using views, queries sent using TCP Proxy Protocol will select the view according to the address of the proxy, rather than the address of the initial query. This can lead to wrong data being returned. Missing escaping of special characters (such as $ or @) in DNS names received during an AXFR …
Affected versions
- powerdns < 5.0.5
By system
0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | dns/powerdns | 5.1.4_3 | fixed | (64 days after) |
| OpenBSD | net/powerdns | 5.1.4p0 | out of range, by version | |
| NetBSD | net/powerdns | 5.1.4nb1 | not listed | |
| MidnightBSD | dns/powerdns | 5.1.4 | out of range, by version |