NLnet Labs ldns 1.2.0 up to and including versions 1.9.0, when used in applications as (stub) resolver over UDP, lacks matching the query destination address and port with the response source address and port. Furthermore not the query ID, neither the question of the query is matched with that of the response. This makes applications, that use ldns for (stub) resolver functionality over UDP, vulnerable for off-path poisoning attacks. The drill tool, which is shipped with ldns, suffers from this vulnerability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-ldnsUpgrade perl-ldnsUpgrade ldnsUpgrade ldns-docUpgrade ldns-develUpgrade ldns-utils | Aug 4, 2026 | Aug 3, 2026 |
| Freebsd | — | Upgrade FreeBSDUpgrade ldns | Jun 23, 2026 | Jun 23, 2026 |
| Redhat_linux | — | Upgrade ldns-utils-debuginfoUpgrade ldns-debugsourceNo solution existsUpgrade python3-ldnsUpgrade ldns-utilsUpgrade ldnsUpgrade perl-ldnsUpgrade ldns-debuginfoUpgrade python3-ldns-debuginfoUpgrade ldns-develUpgrade perl-ldns-debuginfoUpgrade ldns-doc | Jul 17, 2026 | Jun 10, 2026 |
| Rocky_linux | — | Upgrade ldns-debuginfoUpgrade ldns-develUpgrade perl-ldns-debuginfoUpgrade ldnsUpgrade ldns-utilsUpgrade perl-ldnsUpgrade ldns-utils-debuginfoUpgrade ldns-debugsourceUpgrade python3-ldns-debuginfoUpgrade python3-ldns | Aug 6, 2026 | Aug 4, 2026 |
| Ubuntu | — | Upgrade libldns1 (Ubuntu Pro)Upgrade ldnsutils (Ubuntu Pro)Upgrade libldns2 (Ubuntu Pro)Upgrade libldns3 (Ubuntu Pro)Upgrade libldns3t64 (Ubuntu Pro) | Jun 18, 2026 | Jun 10, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub