CVE-2026-33598
A cached crafted response can cause an out-of-bounds read if custom Lu ...
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD.
Descripción
A cached crafted response can cause an out-of-bounds read if custom Lua code calls getDomainListByAddress() or getAddressListByDomain() on a packet cache.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.23 | dnsdist | 2.0.4-r0 |
| alpine 3.24 | dnsdist | 2.0.4-r0 |
| alpine edge | dnsdist | 2.0.4-r0 |
| debian 11 | dnsdist | sin corrección indicada |
| debian 12 | dnsdist | sin corrección indicada |
| debian 13 | dnsdist | 1.9.14-0+deb13u1 |
| debian 14 | dnsdist | 2.0.4-1 |
| echo | dnsdist | 1.9.14-0+deb13u1 |
| rapidfort alpine 3.20 | dnsdist | 2.0.4-r0 |
| rapidfort alpine 3.21 | dnsdist | 2.0.4-r0 |
| rapidfort alpine 3.22 | dnsdist | 2.0.4-r0 |
| rapidfort debian 12 | dnsdist | 0:1.9.14-0+deb13u1, 0:2.0.4-1 |
Mostrar las 19 entradas de 19 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| alpine 3.23 | dnsdist | 2.0.4-r0 |
| alpine 3.24 | dnsdist | 2.0.4-r0 |
| alpine edge | dnsdist | 2.0.4-r0 |
| debian 11 | dnsdist | sin corrección indicada |
| debian 12 | dnsdist | sin corrección indicada |
| debian 13 | dnsdist | 1.9.14-0+deb13u1 |
| debian 14 | dnsdist | 2.0.4-1 |
| echo | dnsdist | 1.9.14-0+deb13u1 |
| rapidfort alpine 3.20 | dnsdist | 2.0.4-r0 |
| rapidfort alpine 3.21 | dnsdist | 2.0.4-r0 |
| rapidfort alpine 3.22 | dnsdist | 2.0.4-r0 |
| rapidfort debian 12 | dnsdist | 0:1.9.14-0+deb13u1, 0:2.0.4-1 |
| rapidfort debian 13 | dnsdist | 0:1.9.14-0+deb13u1, 0:2.0.4-1 |
| rapidfort fedora 43 | dnsdist | 2.0.6-1.fc43 |
| rapidfort Oracle Linux 10 | dnsdist | 2.0.6-1.el10_3 |
| rapidfort Oracle Linux 9 | dnsdist | 1.9.14-1.el9 |
| rapidfort ubuntu 20.04 | dnsdist | 0:2.0.5-1 |
| rapidfort ubuntu 22.04 | dnsdist | 0:2.0.5-1 |
| rapidfort ubuntu 24.04 | dnsdist | 0:2.0.5-1 |